From 87a7f01f751080f58a2fe42ab1f6cb68a1e5f312 Mon Sep 17 00:00:00 2001 From: ewasylishen Date: Sun, 9 Apr 2017 20:42:22 +0000 Subject: [PATCH] Host_Loadgame_f: block relative paths, like Host_Savegame_f does git-svn-id: svn+ssh://svn.code.sf.net/p/quakespasm/code/trunk@1396 af15c1b1-3010-417e-b628-4374ebc0bcbd --- quakespasm/Quake/host_cmd.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/quakespasm/Quake/host_cmd.c b/quakespasm/Quake/host_cmd.c index b8ff444c..626dc8d7 100644 --- a/quakespasm/Quake/host_cmd.c +++ b/quakespasm/Quake/host_cmd.c @@ -1125,6 +1125,12 @@ void Host_Loadgame_f (void) Con_Printf ("load : load a game\n"); return; } + + if (strstr(Cmd_Argv(1), "..")) + { + Con_Printf ("Relative pathnames are not allowed.\n"); + return; + } cls.demonum = -1; // stop demo loop in case this fails