walkero
/
physfs
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Catch access to paths that are just "." or ".." without any path separator.

This commit is contained in:
Ryan C. Gordon 2017-10-26 14:37:16 -04:00
parent 62d24e228f
commit a45afc5d50
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/physfs.c
View File

@ -939,6 +939,10 @@ static int sanitizePlatformIndependentPath(const char *src, char *dst)
while (*src == '/') /* skip initial '/' chars... */ while (*src == '/') /* skip initial '/' chars... */
src++; src++;
/* Make sure the entire string isn't "." or ".." */
if ((strcmp(src, ".") == 0) || (strcmp(src, "..") == 0))
BAIL(PHYSFS_ERR_BAD_FILENAME, 0);
prev = dst; prev = dst;
do do
{ {