From 99b26b4267937bb2f77f964b8e72038f6e90d6da Mon Sep 17 00:00:00 2001 From: Jan Synacek Date: Wed, 29 Mar 2017 08:25:52 +0200 Subject: [PATCH] basic: forbid rm_rf() to remove paths ending with ".." (#5653) Fixes: #5644 --- src/basic/rm-rf.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/basic/rm-rf.c b/src/basic/rm-rf.c index 94c67bae3..565f240e1 100644 --- a/src/basic/rm-rf.c +++ b/src/basic/rm-rf.c @@ -190,6 +190,13 @@ int rm_rf(const char *path, RemoveFlags flags) { } #if 0 /// elogind does not support BTRFS this directly + /* Another safe-check. Removing "/path/.." could easily remove entire root as well. + * It's especially easy to do using globs in tmpfiles, like "/path/.*", which the glob() + * function expands to both "/path/." and "/path/..". + * Return -EINVAL to be consistent with rmdir("/path/."). */ + if (endswith(path, "/..") || endswith(path, "/../")) + return -EINVAL; + if ((flags & (REMOVE_SUBVOLUME|REMOVE_ROOT|REMOVE_PHYSICAL)) == (REMOVE_SUBVOLUME|REMOVE_ROOT|REMOVE_PHYSICAL)) { /* Try to remove as subvolume first */ r = btrfs_subvol_remove(path, BTRFS_REMOVE_RECURSIVE|BTRFS_REMOVE_QUOTA); -- 2.30.2