- Timestamp:
- Oct 21, 2007 4:49:55 PM (17 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/src/VBox/Devices/Network/slirp/tftp.c
r5295 r5401 314 314 /* do sanity checks on the filename */ 315 315 316 if ( !strncmp( spt->filename, "../", 3)316 if ( !strncmp((const char*)spt->filename, "../", 3) 317 317 || (spt->filename[strlen((const char *)spt->filename) - 1] == '/') 318 || strstr((c har *)spt->filename, "/../")) {318 || strstr((const char *)spt->filename, "/../")) { 319 319 tftp_send_error(pData, spt, 2, "Access violation", tp); 320 320 return;
Note:
See TracChangeset
for help on using the changeset viewer.