[Bug 1036283] CVE-2017-2619 regression with "follow symlinks = no"