mirrors/tar
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

(try_purge_directory): Ensure that arguments to T and R are safe.

Browse Source
This commit is contained in:
Sergey Poznyakoff
2007-10-03 20:18:32 +00:00
parent 519a7c0c75
commit 6f6864df13
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
src/incremen.c
View File

@@ -1410,6 +1410,19 @@ try_purge_directory (char const *directory_name)
arc += strlen (arc) + 1; arc += strlen (arc) + 1;
dst = arc + 1; dst = arc + 1;
/* Ensure that neither source nor destination are absolute file
names (unless permitted by -P option), and that they do not
contain dubious parts (e.g. ../).
This is an extra safety precaution. Besides, it might be
necessary to extract from archives created with tar versions
prior to 1.19. */
if (*src)
src = safer_name_suffix (src, false, absolute_names_option);
if (*dst)
dst = safer_name_suffix (dst, false, absolute_names_option);
if (*src == 0) if (*src == 0)
src = temp_stub; src = temp_stub;
else if (*dst == 0) else if (*dst == 0)