(List
  (= scope=<EAssignScope.GLOBAL 1> flags=0 words=[] bindings=[('test_description', {[SQ <LIT_CHARS "paths written by git-apply cannot escape the working tree">]})])
  (Com {[LIT_CHARS .]} {[LIT_CHARS ./test-lib.sh]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "bump git repo one level down">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tmkdir inside &&\n"> <LIT_CHARS "\tmv .git inside/ &&\n"> <LIT_CHARS "\tcd inside\n">]})
  (FunctionDef mkpatch_add []
    (AndOr OP_AND_IF
      (Com {[LIT_CHARS rm]} {[LIT_CHARS -f]} {[DQ [VarSub 2 test_op=VS_TEST_COLON_HYPHEN {[VarSub 1]}]]})
      (Com {[LIT_CHARS cat]}
        <
        (HereDocRedirectNode here_end='EOF' do_expansion=True body_word={[DQ [LIT_CHARS "diff --git a/"][VarSub 1][LIT_CHARS " b/"][VarSub 1][LIT_CHARS "\n"][LIT_CHARS "new file mode 100644\n"][LIT_CHARS "index 0000000..53c74cd\n"][LIT_CHARS "--- /dev/null\n"][LIT_CHARS "+++ b/"][VarSub 1][LIT_CHARS "\n"][LIT_CHARS "@@ -0,0 +1 @@\n"][LIT_CHARS "+evil\n"]]} <REDIR_DLESSDASH "<<-"> 0),
        >
      )
    )
  )
  (FunctionDef mkpatch_del []
    (AndOr OP_AND_IF
      (Com {[LIT_CHARS echo]} {[LIT_CHARS evil]}
        <
        (FilenameRedirectNode filename={[DQ [VarSub 2 test_op=VS_TEST_COLON_HYPHEN {[VarSub 1]}]]} <REDIR_GREAT ">"> 1),
        >
      )
      (Com {[LIT_CHARS cat]}
        <
        (HereDocRedirectNode here_end='EOF' do_expansion=True body_word={[DQ [LIT_CHARS "diff --git a/"][VarSub 1][LIT_CHARS " b/"][VarSub 1][LIT_CHARS "\n"][LIT_CHARS "deleted file mode 100644\n"][LIT_CHARS "index 53c74cd..0000000\n"][LIT_CHARS "--- a/"][VarSub 1][LIT_CHARS "\n"][LIT_CHARS "+++ /dev/null\n"][LIT_CHARS "@@ -1 +0,0 @@\n"][LIT_CHARS "-evil\n"]]} <REDIR_DLESSDASH "<<-"> 0),
        >
      )
    )
  )
  (FunctionDef mkpatch_symlink []
    (AndOr OP_AND_IF
      (Com {[LIT_CHARS rm]} {[LIT_CHARS -f]} {[DQ [VarSub 1]]})
      (Com {[LIT_CHARS cat]}
        <
        (HereDocRedirectNode here_end='EOF' do_expansion=True body_word={[DQ [LIT_CHARS "diff --git a/"][VarSub 1][LIT_CHARS " b/"][VarSub 1][LIT_CHARS "\n"][LIT_CHARS "new file mode 120000\n"][LIT_CHARS "index 0000000.."][ComSub (Pipeline (Com {[LIT_CHARS printf]} {[DQ [LIT_CHARS "%s"]]} {[DQ [VarSub 2]]}) (Com {[LIT_CHARS git]} {[LIT_CHARS hash-object]} {[LIT_CHARS --stdin]}) )][LIT_CHARS "\n"][LIT_CHARS "--- /dev/null\n"][LIT_CHARS "+++ b/"][VarSub 1][LIT_CHARS "\n"][LIT_CHARS "@@ -0,0 +1 @@\n"][LIT_CHARS "+"][VarSub 2][LIT_CHARS "\n"][\ LIT_ESCAPED_CHAR "\\ "][LIT_CHARS "No newline at end of file\n"]]} <REDIR_DLESSDASH "<<-"> 0),
        >
      )
    )
  )
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "cannot create file containing ..">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tmkpatch_add ../foo >patch &&\n"> <LIT_CHARS "\ttest_must_fail git apply patch &&\n"> <LIT_CHARS "\ttest_path_is_missing ../foo\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "can create file containing .. with --unsafe-paths">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tmkpatch_add ../foo >patch &&\n"> <LIT_CHARS "\tgit apply --unsafe-paths patch &&\n"> <LIT_CHARS "\ttest_path_is_file ../foo\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "cannot create file containing .. (index)">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tmkpatch_add ../foo >patch &&\n"> <LIT_CHARS "\ttest_must_fail git apply --index patch &&\n"> <LIT_CHARS "\ttest_path_is_missing ../foo\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "cannot create file containing .. with --unsafe-paths (index)">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tmkpatch_add ../foo >patch &&\n"> <LIT_CHARS "\ttest_must_fail git apply --index --unsafe-paths patch &&\n"> <LIT_CHARS "\ttest_path_is_missing ../foo\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "cannot delete file containing ..">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tmkpatch_del ../foo >patch &&\n"> <LIT_CHARS "\ttest_must_fail git apply patch &&\n"> <LIT_CHARS "\ttest_path_is_file ../foo\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "can delete file containing .. with --unsafe-paths">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tmkpatch_del ../foo >patch &&\n"> <LIT_CHARS "\tgit apply --unsafe-paths patch &&\n"> <LIT_CHARS "\ttest_path_is_missing ../foo\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[SQ <LIT_CHARS "cannot delete file containing .. (index)">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\tmkpatch_del ../foo >patch &&\n"> <LIT_CHARS "\ttest_must_fail git apply --index patch &&\n"> <LIT_CHARS "\ttest_path_is_file ../foo\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[LIT_CHARS SYMLINKS]} {[SQ <LIT_CHARS "symlink escape via ..">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\t{\n"> <LIT_CHARS "\t\tmkpatch_symlink tmp .. &&\n"> <LIT_CHARS "\t\tmkpatch_add tmp/foo ../foo\n"> <LIT_CHARS "\t} >patch &&\n"> <LIT_CHARS "\ttest_must_fail git apply patch &&\n"> <LIT_CHARS "\ttest_path_is_missing tmp &&\n"> <LIT_CHARS "\ttest_path_is_missing ../foo\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[LIT_CHARS SYMLINKS]} {[SQ <LIT_CHARS "symlink escape via .. (index)">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\t{\n"> <LIT_CHARS "\t\tmkpatch_symlink tmp .. &&\n"> <LIT_CHARS "\t\tmkpatch_add tmp/foo ../foo\n"> <LIT_CHARS "\t} >patch &&\n"> <LIT_CHARS "\ttest_must_fail git apply --index patch &&\n"> <LIT_CHARS "\ttest_path_is_missing tmp &&\n"> <LIT_CHARS "\ttest_path_is_missing ../foo\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[LIT_CHARS SYMLINKS]} {[SQ <LIT_CHARS "symlink escape via absolute path">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\t{\n"> <LIT_CHARS "\t\tmkpatch_symlink tmp \"$(pwd)\" &&\n"> <LIT_CHARS "\t\tmkpatch_add tmp/foo ../foo\n"> <LIT_CHARS "\t} >patch &&\n"> <LIT_CHARS "\ttest_must_fail git apply patch &&\n"> <LIT_CHARS "\ttest_path_is_missing tmp &&\n"> <LIT_CHARS "\ttest_path_is_missing ../foo\n">]})
  (Com {[LIT_CHARS test_expect_success]} {[LIT_CHARS SYMLINKS]} {[SQ <LIT_CHARS "symlink escape via absolute path (index)">]} {[SQ <LIT_CHARS "\n"> <LIT_CHARS "\t{\n"> <LIT_CHARS "\t\tmkpatch_symlink tmp \"$(pwd)\" &&\n"> <LIT_CHARS "\t\tmkpatch_add tmp/foo ../foo\n"> <LIT_CHARS "\t} >patch &&\n"> <LIT_CHARS "\ttest_must_fail git apply --index patch &&\n"> <LIT_CHARS "\ttest_path_is_missing tmp &&\n"> <LIT_CHARS "\ttest_path_is_missing ../foo\n">]})
  (Com {[LIT_CHARS test_done]})
)