Proxmox/pxar
5
0
Fork 0
mirror of git://git.proxmox.com/git/pxar.git synced 2025-01-08 01:17:40 +03:00
Code Releases Activity

decoder: forbid slashes in file names

Browse Source 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
This commit is contained in:
Wolfgang Bumiller 2020-06-08 10:26:36 +02:00
parent ef72634f27
commit 2dfb36020a
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/decoder/mod.rs
View File

@ -317,6 +317,9 @@ impl<I: SeqRead> DecoderImpl<I> {
if data.is_empty() {
io_bail!("illegal path found (empty)");
}
if data.contains(&b'/') {
io_bail!("illegal path found (contains slashes, this is a security concern)");
}
let path = PathBuf::from(OsString::from_vec(data));
self.set_path(&path)?;