summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: c0c74a8)
raw | patch | inline | side by side (parent: c0c74a8)
author | Mark Wooding <mdw@distorted.org.uk> | |
Fri, 3 Feb 2006 20:27:02 +0000 (20:27 +0000) | ||
committer | Junio C Hamano <junkio@cox.net> | |
Sat, 4 Feb 2006 07:33:20 +0000 (23:33 -0800) |
Could cause a crash if --base-path set. Unlikely to be a security the
concern: message doesn't go to the client, so we can't leak anything
(except by dumping core), and we've already forked, so it's not a denial
of service.
Signed-off-by: Mark Wooding <mdw@distorted.org.uk>
Signed-off-by: Junio C Hamano <junkio@cox.net>
concern: message doesn't go to the client, so we can't leak anything
(except by dumping core), and we've already forked, so it's not a denial
of service.
Signed-off-by: Mark Wooding <mdw@distorted.org.uk>
Signed-off-by: Junio C Hamano <junkio@cox.net>
daemon.c | patch | blob | history |
diff --git a/daemon.c b/daemon.c
index bb014fa9c2cb8c02a3952d0fc521358222662da1..532bb0c325fd07e13360389297807a19a11ee33e 100644 (file)
--- a/daemon.c
+++ b/daemon.c
static char rpath[PATH_MAX];
if (*dir != '/') {
/* Forbid possible base-path evasion using ~paths. */
- logerror("'%s': Non-absolute path denied (base-path active)");
+ logerror("'%s': Non-absolute path denied (base-path active)", dir);
return NULL;
}
snprintf(rpath, PATH_MAX, "%s%s", base_path, dir);