Changeset 88637 in vbox for trunk/src/VBox

Timestamp:

Apr 21, 2021 10:11:34 PM (4 years ago)

Author:

vboxsync

Message:

Main/SharedFolderImpl.cpp: Reject shared folder paths which have a
filename as their final component by performing additional pathname
vetting in the createSharedFolder() API back-end routine
SharedFolder::i_protectedInit().

File:

• trunk/src/VBox/Main/src-all/SharedFolderImpl.cpp (modified) (1 diff)

trunk/src/VBox/Main/src-all/SharedFolderImpl.cpp

@@ -291 +291 @@
         if (RTPathCompare(hostPath.c_str(), hostPathFull) != 0)
             return setError(E_INVALIDARG, tr("Shared folder path '%s' is not absolute"), hostPath.c_str());
+
+        RTFSOBJINFO ObjInfo;
+        vrc = RTPathQueryInfo(hostPathFull, &ObjInfo, RTFSOBJATTRADD_NOTHING);
+        if (RT_FAILURE(vrc))
+            return setError(E_INVALIDARG, tr("RTPathQueryInfo failed on shared folder path '%s': %Rrc"), hostPathFull, vrc);
+
+        if (!RTFS_IS_DIRECTORY(ObjInfo.Attr.fMode))
+            return setError(E_INVALIDARG, tr("Shared folder path '%s' is not a directory"), hostPathFull);
     }