[GNUnet-SVN] r2369 - GNUnet/src/applications/fs/ecrs

[durner]

Author: durner
Date: 2005-12-22 11:11:00 -0800 (Thu, 22 Dec 2005)
New Revision: 2369

Modified:
   GNUnet/src/applications/fs/ecrs/meta.c
Log:
replace ..

Modified: GNUnet/src/applications/fs/ecrs/meta.c
===================================================================
--- GNUnet/src/applications/fs/ecrs/meta.c      2005-12-22 15:03:33 UTC (rev 
2368)
+++ GNUnet/src/applications/fs/ecrs/meta.c      2005-12-22 19:11:00 UTC (rev 
2369)
@@ -807,6 +807,11 @@
   for (i=strlen(renameTo)-1;i>=0;i--)
     if (! isprint(renameTo[i]))
       renameTo[i] = '_';
+    else if (renameTo[i] == '.' && i > 0 && renameTo[i-1] == '.') {
+      /* remove .. to avoid directory traversal */
+      renameTo[i-1] = renameTo[i] = '_';
+      i--;
+    }
   if (0 != strcmp(renameTo, filename)) {
     if (0 == STAT(renameTo,
                   &filestat)) {