CVE-2007-3846: Check that client dir separator is not in a path component.
CVE-2007-3846: Check that client dir separator is not in a path component.

See http://cve.mitre.org/cgi-bin/cvename.cgi?name=2007-3846.

* subversion/libsvn_wc/update_editor.c
  (check_path_under_root): New helper function.
  (delete_entry, add_or_open_file, open_directory, add_directory):
    Call above, to prevent paths above cwd from being affected.

Patch by: Nils Durner <ndurner{_AT_}googlemail.com>
          kfogel


git-svn-id: f8a4e5e023278da1e04e203c7fe051e3c4285d88@866121 13f79535-47bb-0310-9956-ffa450edef68

wbond/subversion,YueLinHo/Subversion,wbond/subversion,wbond/subversion,wbond/subversion,YueLinHo/Subversion,YueLinHo/Subversion,YueLinHo/Subversion,YueLinHo/Subversion,YueLinHo/Subversion,YueLinHo/Subversion,wbond/subversion,wbond/subversion,wbond/subversion,YueLinHo/Subversion