[ruby/rubygems] Install location safety should consider casing

https://github.com/rubygems/rubygems/commit/0a0ad34af3
2021-10-05 13:14:17 +02:00 · 2021-10-05 13:14:17 +02:00 · a5289bfa71
commit a5289bfa71
parent 6c878731c1
1 changed files with 1 additions and 1 deletions
--- a/lib/rubygems/package.rb
+++ b/lib/rubygems/package.rb
@ -471,7 +471,7 @@ EOM
    destination = File.expand_path(filename, destination_dir)

    raise Gem::Package::PathError.new(destination, destination_dir) unless
-      destination.start_with? destination_dir + '/'
+      normalize_path(destination).start_with? normalize_path(destination_dir + '/')

    begin
      real_destination = File.expand_path(File.realpath(destination))