diff options
| author | Stefan Hajnoczi <stefanha@redhat.com> | 2019-02-26 17:58:59 +0000 |
|---|---|---|
| committer | Dr. David Alan Gilbert <dgilbert@redhat.com> | 2020-01-23 16:41:36 +0000 |
| commit | 25dae28c58d7e706b5d5db99042c9db3cef2e657 (patch) | |
| tree | 7e5cfc815d3541e43703e8af81e23e3015edce63 /tools/virtiofsd/fuse_virtio.c | |
| parent | 5fe319a7b19c9c328e6e061bffcf1ff6cc8b89ce (diff) | |
virtiofsd: validate path components
Several FUSE requests contain single path components. A correct FUSE
client sends well-formed path components but there is currently no input
validation in case something went wrong or the client is malicious.
Refuse ".", "..", and paths containing '/' when we expect a path
component.
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
Diffstat (limited to 'tools/virtiofsd/fuse_virtio.c')
0 files changed, 0 insertions, 0 deletions