qf/quake2forge
0
0
Fork 0
mirror of https://git.code.sf.net/p/quake/quake2forge synced 2025-03-29 22:01:21 +00:00
Code Issues Projects Releases Packages Wiki Activity

Jailed link paths to gamedir, fixing known exploit:

Browse source 
rcon link /etc owned
download owned/sensitivefile
This commit is contained in:
Jay Dolan 2006-01-14 14:42:48 +00:00
parent cdc2e36cf7
commit e1326ba6f7
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
src/files.c
View file

@ -719,12 +719,21 @@ Creates a filelink_t
*/
void FS_Link_f(void){
filelink_t *l, **prev;
char *from;
if(Cmd_Argc() != 3){
Com_Printf("USAGE: link <from> <to>\n");
return;
}
from = Cmd_Argv(1);
// jail link sources to gamedir
if(strstr(from, "..") || *from == '/' || *from == '.'){
Com_Printf("Illegal path name %s\n", from);
return;
}
// see if the link already exists
prev = &fs_links;
for(l = fs_links; l; l = l->next){