i2p/haiku-beta6
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check the given path for ".."

Browse Source
This commit is contained in:
Stefano Ceccherini
2013-11-10 17:30:02 +01:00
parent 5ae9ef055c
commit f05b8e3873
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/add-ons/kernel/network/devices/ethernet/ethernet.cpp
+6 -3
View File
@@ -118,10 +118,13 @@ ethernet_link_checker(void *)
status_t status_t
ethernet_init(const char *name, net_device **_device) ethernet_init(const char *name, net_device **_device)
{ {
// make sure this is a device in /dev/net, but not the // Make sure this is a device in /dev/net, but not the
// networking (userland) stack driver // networking (userland) stack driver.
// Also make sure the user didn't pass a path like
// /dev/net/../etc.
if (strncmp(name, "/dev/net/", 9) if (strncmp(name, "/dev/net/", 9)
|| !strcmp(name, "/dev/net/userland_server")) || !strcmp(name, "/dev/net/userland_server")
|| strstr(name, "..") != NULL)
return B_BAD_VALUE; return B_BAD_VALUE;
if (access(name, F_OK) != 0) if (access(name, F_OK) != 0)