this was harder than it seemed at first glance).  Also push code for
checking for ".." in file names into path.c where it belongs.