Skip to content

Commit 1a10622

Browse files
committed
vulnerability fix
1 parent 6b575ad commit 1a10622

1 file changed

Lines changed: 6 additions & 0 deletions

File tree

src/yvalve/PluginManager.cpp

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -782,6 +782,12 @@ namespace
782782

783783
explicit PluginLoadInfo(const char* pluginName)
784784
{
785+
// check for directories in pluginName
786+
PathName path, file;
787+
PathUtils::splitLastComponent(path, file, pluginName);
788+
if (path.hasData())
789+
(Arg::Gds(isc_random) << "Plugin name should not contain directory separator and path component").raise();
790+
785791
// define default values for plugin ...
786792
curModule = fb_utils::getPrefix(IConfigManager::DIR_PLUGINS, pluginName);
787793
regName = pluginName;

0 commit comments

Comments
 (0)