bundled/include/LibreOfficeKit/LibreOfficeKitInit.h | 9 +++++++++ 1 file changed, 9 insertions(+)
New commits: commit 790f3aa5c5a4ca1cfdda41c255a18401c5ded40d Author: Tor Lillqvist <t...@collabora.com> AuthorDate: Thu Oct 25 15:39:50 2018 +0300 Commit: Tor Lillqvist <t...@collabora.com> CommitDate: Mon Oct 29 11:49:11 2018 +0200 Verify that we are actually passed a URL, not a pathname Sure, the test could be even more strict and actually do a case-insensitive check for an initial "file:" or "vnd.sun.star.pathname:". Change-Id: Ic252aeccdec708138530075d1f38fa348d1e469e diff --git a/bundled/include/LibreOfficeKit/LibreOfficeKitInit.h b/bundled/include/LibreOfficeKit/LibreOfficeKitInit.h index ce5054ac9..3251ade7d 100644 --- a/bundled/include/LibreOfficeKit/LibreOfficeKitInit.h +++ b/bundled/include/LibreOfficeKit/LibreOfficeKitInit.h @@ -285,6 +285,15 @@ static LibreOfficeKit *lok_init_2( const char *install_path, const char *user_p return pSym( install_path ); } + if (user_profile_url != NULL && user_profile_url[0] == '/') + { + // It should be either a file: URL or a vnd.sun.star.pathname: URL. + fprintf( stderr, "second parameter to lok_init_2 '%s' should be a URL, not a pathname\n", user_profile_url ); + lok_dlclose( dlhandle ); + free( imp_lib ); + return NULL; + } + free( imp_lib ); // dlhandle is "leaked" // coverity[leaked_storage] _______________________________________________ Libreoffice-commits mailing list libreoffice-comm...@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-commits