/
githubmirror
/
sudo
Обзор
Документация
Войти
/
githubmirror
/
sudo
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
main
lib/util/dotdot.c
51 строка
1 KB
Todd C. Miller
Move contains_dot_dot() to libsudo_util.
21 апр 2026, 19:38
21 апр 2026, 19:38
edc4baa
Код
Авторство
О чём код?
/* * SPDX-License-Identifier: ISC * * Copyright (c) 2025 Todd C. Miller <Todd.Miller@sudo.ws> * * Permission to use, copy, modify, and distribute this software for any * purpose with or without fee is hereby granted, provided that the above * copyright notice and this permission notice appear in all copies. * * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ #include <config.h> #ifdef HAVE_STDBOOL_H # include <stdbool.h> #else # include <compat/stdbool.h> #endif /* HAVE_STDBOOL_H */ #include <stdio.h> #include <stdlib.h> #include <string.h> #include <sudo_compat.h> #include <sudo_debug.h> #include <sudo_util.h> bool sudo_contains_dot_dot_v1(const char *str) { const char *cp; debug_decl(sudo_contains_dot_dot, SUDO_DEBUG_UTIL); for (cp = str; *cp != '\0'; cp++) { /* Match ".." */ if (cp[0] != '.' || cp[1] != '.') continue; /* Match "^.." or "/.." then "../" or "..$" */ if ((cp == str || cp[-1] == '/') && (cp[2] == '/' || cp[2] == '\0')) debug_return_bool(true); } debug_return_bool(false); }