MailScanner/v5
1
1
Fork 0
mirror of https://github.com/MailScanner/v5.git synced 2024-11-10 17:35:06 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #160 from akissa/fix-7zip

Browse source 
FIX: Untaint the $safename var in unpack7zip
This commit is contained in:
Shawn Iverson 2018-02-23 05:12:56 -05:00 committed by GitHub
commit 7869cc7d2d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
common/usr/share/MailScanner/perl/MailScanner/Message.pm
View file

@ -3189,6 +3189,8 @@ sub Unpack7zip {
$nopathname = $name;
$nopathname =~ s/^.*\///;
$safename = $this->MakeNameSafe('r'.$nopathname,$explodeinto);
$safename =~ m|(.*)|;
$safename = $1;
$NameTwo = $safename;
$NameTwo = $1 if $NameTwo =~ /([^\/]+)$/;
#MailScanner::Log::InfoLog("UnPackRar: Member : %s", $member);