xfnw/plan9fox
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

tarfs: make file name safe, canonical and free of . and .. (from sources)

Browse source
This commit is contained in:
cinap_lenrek 2013-10-03 17:30:03 +02:00
parent f163d0014a
commit 7ad47f1083
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
sys/src/cmd/tapefs/tarfs.c
View file

@ -144,10 +144,12 @@ populate(char *name)
}
f.mode &= DMDIR | 0777;
/* make file name safe and canonical */
/* make file name safe, canonical and free of . and .. */
while (fname[0] == '/') /* don't allow absolute paths */
++fname;
cleanname(fname);
while (strncmp(fname, "../", 3) == 0)
fname += 3;
/* reject links */
linkflg = hp->linkflag == LF_SYMLINK1 ||