]> granicus.if.org Git - curl/commit
projects / curl / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 46d71e7) | patch
file: reject paths using embedded %00
authorDaniel Stenberg <daniel@haxx.se>
Thu, 25 Sep 2014 11:44:24 +0000 (13:44 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Tue, 30 Sep 2014 05:37:38 +0000 (07:37 +0200)
commit53cbea22310f1509e98f5537ef3a83c6e600629f
treea184cada60b6d789553e5c686739d0c8cbc01b39tree | snapshot
parent46d71e7fd298f8c5d23034a88e856b254ff64253commit | diff
file: reject paths using embedded %00

Mostly because we use C strings and they end at a binary zero so we know
we can't open a file name using an embedded binary zero.

Reported-by: research@g0blin.co.uk
lib/file.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.