From ed7441b89d9d99497bc29a04c0003be8f70c3b4b Mon Sep 17 00:00:00 2001 From: Slawomir Bochenski Date: Thu, 4 Aug 2011 14:49:56 +0200 Subject: [PATCH] obexd: Add Name header check to ftp_chkput Validation of Name header was missing from ftp_chkput, thus still allowing actual putting. --- obexd/plugins/ftp.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/obexd/plugins/ftp.c b/obexd/plugins/ftp.c index 57b187cca..b0ef540fa 100644 --- a/obexd/plugins/ftp.c +++ b/obexd/plugins/ftp.c @@ -267,6 +267,9 @@ int ftp_chkput(struct obex_session *os, void *user_data) if (name == NULL) return -EBADR; + if (!is_filename(name)) + return -EBADR; + if (obex_get_size(os) == OBJECT_SIZE_DELETE) return 0; -- 2.47.3