Thread (2 messages) 2 messages, 2 authors, 2011-08-09
STALE5531d

[PATCH obexd] Fix missing Name header check in FTP action code

From: Slawomir Bochenski <hidden>
Date: 2011-08-09 08:44:39
Subsystem: the rest · Maintainer: Linus Torvalds

---
 plugins/ftp.c |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)
diff --git a/plugins/ftp.c b/plugins/ftp.c
index 57fd23b..8705975 100644
--- a/plugins/ftp.c
+++ b/plugins/ftp.c
@@ -541,6 +541,10 @@ int ftp_action(struct obex_session *os, obex_object_t *obj, void *user_data)
 	uint8_t action_id;
 
 	name = obex_get_name(os);
+
+	if (name == NULL || !is_filename(name))
+		return -EBADR;
+
 	destname = obex_get_destname(os);
 	action_id = obex_get_action_id(os);
 
-- 
1.7.4.1
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help