nihilist/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-24 12:23:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

src/common/util.c:expand_filename() - Perhaps use GetFullPathName() as a form of input validation on the filename argument.

Browse Source
This commit is contained in:
Jeremy 2015-12-01 15:41:03 -05:00 committed by Nick Mathewson
parent b3639c8291
commit 4e19133dcc
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/common/util.c
View File

@ -2873,6 +2873,9 @@ expand_filename(const char *filename)
{
tor_assert(filename);
#ifdef _WIN32
/* Might consider using GetFullPathName() as described here:
* http://etutorials.org/Programming/secure+programming/Chapter+3.+Input+Validation/3.7+Validating+Filenames+and+Paths/
*/
return tor_strdup(filename);
#else
if (*filename == '~') {