shithub: paste

Info  •  Files  •  Log  •  Branches

paste.c: only use base paste of provided filenames

Previously leading .. in filenames would cause the paste
cgi program to write outside of the paste directory.

--- a/bin/paste.c

+++ b/bin/paste.c

@@ -421,7 +421,12 @@

 						if(cistrcmp(key, "filename") == 0){

 							if(strlen(val) > 0){

 								free(filename);

-								filename = smprint("%s/%s", dir, val);

+								filename = strrchr(val, '/');

+								if(filename == nil)

+									filename = val;

+								else

+									filename++;

+								filename = smprint("%s/%s", dir, filename);

 							}

 						}else if(cistrcmp(key, "name") == 0){

 							if(strcmp(val, "text") == 0)

-- 

⑨