vbox的更動 66608 路徑 trunk/src/VBox/HostDrivers

時間撮記:

2017-4-19 上午10:35:06 (8 年 以前)

作者:

vboxsync

訊息:

HostDrivers/Support: bugref:8740 Relax the path constraints

檔案:

• trunk/src/VBox/HostDrivers/Support/SUPR3HardenedVerify.cpp (修改) (3 筆差異)

trunk/src/VBox/HostDrivers/Support/SUPR3HardenedVerify.cpp

@@ -1188 +1188 @@
 
     /*
-     * Check each component.  No parent references or double slashes.
+     * The root slash should be alone to avoid UNC confusion.
+     */
+    if (RTPATH_IS_SLASH(pszSrc[0]))
+        return supR3HardenedSetError3(VERR_SUPLIB_PATH_NOT_CLEAN, pErrInfo,
+                                      "The path is not clean of leading double slashes: '", pszPath, "'");
+    /*
+     * Check each component.  No parent references.
      */
     pInfo->cComponents = 0;
@@ -1195 +1201 @@
     {
         /* Sanity checks. */
-        if (RTPATH_IS_SLASH(pszSrc[0])) /* can be relaxed if we care. */
-            return supR3HardenedSetError3(VERR_SUPLIB_PATH_NOT_CLEAN, pErrInfo,
-                                          "The path is not clean of double slashes: '", pszPath, "'");
         if (   pszSrc[0] == '.'
             && pszSrc[1] == '.'
@@ -1227 +1230 @@
                                               "The path is too long: '", pszPath, "'");
         }
+
+        /* Skip double slashes. */
+        while (RTPATH_IS_SLASH(*pszSrc))
+            pszSrc++;
     }