From 9101f3118b8023403b19a083683c67d6f90ee41e Mon Sep 17 00:00:00 2001 From: netblue30 Date: Sun, 10 Mar 2019 10:24:13 -0400 Subject: checking for invalid chars in profile filename before any other processing --- src/firejail/main.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src') diff --git a/src/firejail/main.c b/src/firejail/main.c index e186002af..461cba26a 100644 --- a/src/firejail/main.c +++ b/src/firejail/main.c @@ -1522,6 +1522,9 @@ int main(int argc, char **argv) { if (!ppath) errExit("strdup"); + // checking for strange chars in the file name, no globbing + invalid_filename(ppath, 0); + if (*ppath == ':' || access(ppath, R_OK) || is_dir(ppath)) { int has_colon = (*ppath == ':'); char *ptr = ppath; -- cgit v1.2.3-54-g00ecf