tree 1e27461903a3fea32e48913a267ca7e2d28d2e6c
parent 1729ca8692d99ab2c1a269aa79566300de78eb1b
author Slawomir Bochenski <lkslawek@gmail.com> 1312206297 +0200
committer Marcel Holtmann <marcel@holtmann.org> 1354657721 +0100

obexd: Fix valid file name checks for FTP & OPP

Until now adversary could exploit OBEX Name header and perform any kind
of operations (listing, getting, putting) outside of given root by
putting path with ".." components inside this header.