q66
/
efl
forked from enlightenment/efl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

edje_decc - fix strrchr null return case 

fix CID 1039342
This commit is contained in:
Carsten Haitzler 2014-08-27 17:41:12 +09:00
parent 27ae94596f
commit a427fc46f7
1 changed files with 5 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/bin/edje/edje_decc.c
View File

@ -328,7 +328,7 @@ output(void)
INF("Output Image: %s", out);
pp = strdup(out);
p = strrchr(pp, '/');
*p = 0;
if (p) *p = 0;
if (strstr(pp, "../"))
{
ERR("Potential security violation. attempt to write in parent dir.");
@ -359,7 +359,7 @@ output(void)
INF("Output Source File: %s", out);
pp = strdup(out);
p = strrchr(pp, '/');
*p = 0;
if (p) *p = 0;
if (strstr(pp, "../"))
{
ERR("Potential security violation. attempt to write in parent dir.");
@ -410,7 +410,7 @@ output(void)
INF("Output Font: %s", out);
pp = strdup(out);
p = strrchr(pp, '/');
*p = 0;
if (p) *p = 0;
if (strstr(pp, "../"))
{
ERR("Potential security violation. attempt to write in parent dir.");
@ -501,7 +501,7 @@ output(void)
snprintf(out1, sizeof(out1), "%s/%s", outdir, sample->snd_src);
pp = strdup(out1);
p = strrchr(pp, '/');
*p = 0;
if (p) *p = 0;
if (strstr(pp, "../"))
{
ERR("Potential security violation. attempt to write in parent dir.");
@ -548,12 +548,7 @@ output(void)
snprintf(out1, sizeof(out1), "%s/%s", outdir, sample->src);
pp = strdup(out1);
p = strrchr(pp, '/');
if (!p)
{
ERR("Cannot find '/' in file");
exit(-1);
}
*p = 0;
if (p) *p = 0;
if (strstr(pp, "../"))
{
ERR("Potential security violation. attempt to write in parent dir.");