cron2 has submitted this change. ( http://gerrit.openvpn.net/c/openvpn/+/1343?usp=email )
Change subject: openvpnserv: Disallow stdin as config unless user is authorized ...................................................................... openvpnserv: Disallow stdin as config unless user is authorized Reported by: <[email protected]> Change-Id: I356faeebfade1eed9b40d6700b13621c357ec5ac Signed-off-by: Selva Nair <[email protected]> Acked-by: Gert Doering <[email protected]> Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1343 Message-Id: <[email protected]> URL: https://www.mail-archive.com/[email protected]/msg34156.html Signed-off-by: Gert Doering <[email protected]> --- M src/openvpnserv/validate.c 1 file changed, 5 insertions(+), 0 deletions(-) diff --git a/src/openvpnserv/validate.c b/src/openvpnserv/validate.c index 2187fb5..ddaa381 100644 --- a/src/openvpnserv/validate.c +++ b/src/openvpnserv/validate.c @@ -68,6 +68,11 @@ const WCHAR *config_file = NULL; WCHAR config_dir[MAX_PATH]; + /* fname = stdin is special: do not treat it as a relative path */ + if (wcscmp(fname, L"stdin") == 0) + { + return FALSE; + } /* convert fname to full path */ if (PathIsRelativeW(fname)) { -- To view, visit http://gerrit.openvpn.net/c/openvpn/+/1343?usp=email To unsubscribe, or for help writing mail filters, visit http://gerrit.openvpn.net/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: openvpn Gerrit-Branch: master Gerrit-Change-Id: I356faeebfade1eed9b40d6700b13621c357ec5ac Gerrit-Change-Number: 1343 Gerrit-PatchSet: 2 Gerrit-Owner: selvanair <[email protected]> Gerrit-Reviewer: cron2 <[email protected]> Gerrit-Reviewer: flichtenheld <[email protected]> Gerrit-Reviewer: plaisthos <[email protected]> Gerrit-CC: openvpn-devel <[email protected]>
_______________________________________________ Openvpn-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-devel
