mirror of
https://github.com/ostreedev/ostree.git
synced 2025-02-21 05:57:45 +03:00
core: Preemptively error out on paths longer than PATH_MAX
Just noticed this while thinking like an attacker.
This commit is contained in:
parent
3292dcb6d6
commit
786ce3b560
@ -132,6 +132,13 @@ ot_util_path_split_validate (const char *path,
|
|||||||
GPtrArray *ret_components = NULL;
|
GPtrArray *ret_components = NULL;
|
||||||
int i;
|
int i;
|
||||||
|
|
||||||
|
if (strlen (path) > PATH_MAX)
|
||||||
|
{
|
||||||
|
g_set_error (error, G_IO_ERROR, G_IO_ERROR_FAILED,
|
||||||
|
"Path '%s' is too long", path);
|
||||||
|
goto out;
|
||||||
|
}
|
||||||
|
|
||||||
ret_components = ot_split_string_ptrarray (path, '/');
|
ret_components = ot_split_string_ptrarray (path, '/');
|
||||||
|
|
||||||
/* Canonicalize by removing '.' and '', throw an error on .. */
|
/* Canonicalize by removing '.' and '', throw an error on .. */
|
||||||
|
Loading…
x
Reference in New Issue
Block a user