avoid directory traversal

1 files changed, 7 insertions, 0 deletions

diff --git a/src/plugins/fs/download.c b/src/plugins/fs/download.c
index 2ee8becf..6698b329 100644
--- a/src/plugins/fs/download.c
+++ b/src/plugins/fs/download.c
@@ -420,6 +420,7 @@ void displayDownloadComplete(const struct ECRS_URI * uri,
   GtkTreePath * path;
   struct ECRS_URI * u;
   char *dirPath;
+  char *dotdot;
 
   pos = head;
   while (pos != NULL) {
@@ -527,6 +528,12 @@ void displayDownloadComplete(const struct ECRS_URI * uri,
         }
         fnURL[len] = 0;
         
+        /* avoid directory traversal */
+        while(dotdot = strstr("../")) {
+          dotdot[0] = '_';
+          dotdot[1] = '_';
+        }
+        
         /* If the file was downloaded before, fnURL is a symlink to
            dstFile */
         if ((READLINK(fnURL, dummy, 1) == -1) && (errno == EINVAL)) {