Bug#327281: Copying files between checkout copies of different repositories is incorrectly allowed

[Enrico Zini]

Package: subversion
Version: 1.2.0-1
Severity: normal

Hello,

Just to try, I did:

$ svn co http://repo1 repo1
$ svn co http://repo2 repo2
$ svn cp repo1/foo repo2/
$ # Wow!  It works!
$ cd repo2
$ svn commit -m 'WoW!'
Adding         foo
Transmitting file data .......svn: Commit failed (details follow):
svn: Source url 'foo' is from different
repository
svn: Your commit message was left in a temporary file:
svn:    '/home/enrico/repo2/svn-commit.2.tmp'

(commands and output are edited to make them simpler: I think it gives
 the idea.  I can send a real paste if you want)

Ciao,

Enrico


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.12-1-686-smp
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8)

Versions of packages subversion depends on:
ii  db4.2-util                 4.2.52-19     Berkeley v4.2 Database Utilities
ii  libapr0                    2.0.54-4      the Apache Portable Runtime
ii  libc6                      2.3.5-6       GNU C Library: Shared libraries an
ii  libdb4.2                   4.2.52-19     Berkeley v4.2 Database Libraries [
ii  libexpat1                  1.95.8-3      XML parsing C library - runtime li
ii  libldap2                   2.1.30-11     OpenLDAP libraries
ii  libneon24                  0.24.7.dfsg-2 An HTTP and WebDAV client library
ii  libssl0.9.7                0.9.7g-2      SSL shared libraries
ii  libsvn0                    1.2.0-1       shared libraries used by Subversio
ii  libxml2                    2.6.20-1      GNOME XML library
ii  patch                      2.5.9-2       Apply a diff file to an original
ii  zlib1g                     1:1.2.3-4     compression library - runtime

subversion recommends no packages.

-- no debconf information