[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SCM] Debian package checker branch, master, updated. 2.5.0-rc2-122-g12888e8



The following commit has been merged in the master branch:
commit 8893a15fcbb2afafc6e322b4c225626a3101f73c
Author: Niels Thykier <niels@thykier.net>
Date:   Tue Feb 22 16:24:11 2011 +0100

    Clean fields of Processable to avoid path transversal

diff --git a/lib/Lintian/Processable.pm b/lib/Lintian/Processable.pm
index babf8b9..c238dcd 100644
--- a/lib/Lintian/Processable.pm
+++ b/lib/Lintian/Processable.pm
@@ -177,6 +177,10 @@ sub _init{
     $self->{pkg_version}     = '' unless (defined $self->{pkg_version});
     $self->{pkg_src_version} = '' unless (defined $self->{pkg_src_version});
     $self->{pkg_arch}        = '' unless (defined $self->{pkg_arch});
+    # make sure none of the fields can cause traversal.
+    foreach my $field (qw(pkg_name pkg_version pkg_src pkg_src_version pkg_arch)) {
+        $self->{$field} =~ s,/,_,o;
+    }
     return 1;
 }
 

-- 
Debian package checker


Reply to: