Changeset 66608 in vbox

Timestamp:

Apr 19, 2017 10:35:06 AM (8 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

114647

Message:

HostDrivers/Support: bugref:8740 Relax the path constraints

File:

• trunk/src/VBox/HostDrivers/Support/SUPR3HardenedVerify.cpp (modified) (3 diffs)

trunk/src/VBox/HostDrivers/Support/SUPR3HardenedVerify.cpp

@@ -1188 +1188 @@
 
     /*
-     * Check each component.  No parent references or double slashes.
+     * The root slash should be alone to avoid UNC confusion.
+     */
+    if (RTPATH_IS_SLASH(pszSrc[0]))
+        return supR3HardenedSetError3(VERR_SUPLIB_PATH_NOT_CLEAN, pErrInfo,
+                                      "The path is not clean of leading double slashes: '", pszPath, "'");
+    /*
+     * Check each component.  No parent references.
      */
     pInfo->cComponents = 0;
@@ -1195 +1201 @@
     {
         /* Sanity checks. */
-        if (RTPATH_IS_SLASH(pszSrc[0])) /* can be relaxed if we care. */
-            return supR3HardenedSetError3(VERR_SUPLIB_PATH_NOT_CLEAN, pErrInfo,
-                                          "The path is not clean of double slashes: '", pszPath, "'");
         if (   pszSrc[0] == '.'
             && pszSrc[1] == '.'
@@ -1227 +1230 @@
                                               "The path is too long: '", pszPath, "'");
         }
+
+        /* Skip double slashes. */
+        while (RTPATH_IS_SLASH(*pszSrc))
+            pszSrc++;
     }