Catch access to paths that are just "." or ".." without any path separator.

(transplanted from b6d25a1927c2274cf31166a74b87b24e2752e0e8)
2017-10-26 14:37:16 -04:00 · 2017-10-26 14:37:16 -04:00 · 179bd1d40a
parent a80261989e
commit 179bd1d40a
1 changed files with 4 additions and 0 deletions
--- a/src/physfs.c
+++ b/src/physfs.c
@ -939,6 +939,10 @@ static int sanitizePlatformIndependentPath(const char *src, char *dst)
    while (*src == '/')  /* skip initial '/' chars... */
        src++;

+    /* Make sure the entire string isn't "." or ".." */
+    if ((strcmp(src, ".") == 0) || (strcmp(src, "..") == 0))
+        BAIL(PHYSFS_ERR_BAD_FILENAME, 0);
+
    prev = dst;
    do
    {