Skip to content

Commit 5f230a8

Browse files
committed
vulnerability fix
1 parent b48a176 commit 5f230a8

1 file changed

Lines changed: 6 additions & 0 deletions

File tree

src/yvalve/PluginManager.cpp

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -780,6 +780,12 @@ namespace
780780

781781
explicit PluginLoadInfo(const char* pluginName)
782782
{
783+
// check for directories in pluginName
784+
PathName path, file;
785+
PathUtils::splitLastComponent(path, file, pluginName);
786+
if (path.hasData())
787+
(Arg::Gds(isc_random) << "Plugin name should not contain directory separator and path component").raise();
788+
783789
// define default values for plugin ...
784790
curModule = fb_utils::getPrefix(IConfigManager::DIR_PLUGINS, pluginName);
785791
regName = pluginName;

0 commit comments

Comments
 (0)