Repository: incubator-guacamole-server Updated Branches: refs/heads/master d9c1ce773 -> 836fc3eaa
GUACAMOLE-326: Explicitly deny attempted reads/writes to Windows named data streams (like "foo:Zone.identifier" for the file "foo"). Project: http://git-wip-us.apache.org/repos/asf/incubator-guacamole-server/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-guacamole-server/commit/e5a1b4d8 Tree: http://git-wip-us.apache.org/repos/asf/incubator-guacamole-server/tree/e5a1b4d8 Diff: http://git-wip-us.apache.org/repos/asf/incubator-guacamole-server/diff/e5a1b4d8 Branch: refs/heads/master Commit: e5a1b4d8ae50041aac9c71b025af9401c12c165a Parents: d9c1ce7 Author: Michael Jumper <mjum...@apache.org> Authored: Sun Jun 4 13:05:11 2017 -0700 Committer: Michael Jumper <mjum...@apache.org> Committed: Mon Jun 26 14:40:32 2017 -0700 ---------------------------------------------------------------------- src/protocols/rdp/rdp_fs.c | 4 ++++ 1 file changed, 4 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-guacamole-server/blob/e5a1b4d8/src/protocols/rdp/rdp_fs.c ---------------------------------------------------------------------- diff --git a/src/protocols/rdp/rdp_fs.c b/src/protocols/rdp/rdp_fs.c index 28019d8..88668d8 100644 --- a/src/protocols/rdp/rdp_fs.c +++ b/src/protocols/rdp/rdp_fs.c @@ -654,6 +654,10 @@ int guac_rdp_fs_normalize_path(const char* path, char* abs_path) { } /* end if separator */ + /* We do not currently support named streams */ + else if (c == ':') + return 1; + } /* end for each character */ /* If no components, the path is simply root */
