packaging/tar-1.17-dot_dot_vuln.patch


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

--- tar-1.17/src/names.c.dot_dot_vuln	2007-06-28 18:19:13.000000000 +0200
+++ tar-1.17/src/names.c	2007-08-15 16:29:20.000000000 +0200
@@ -1009,11 +1009,10 @@ contains_dot_dot (char const *name)
       if (p[0] == '.' && p[1] == '.' && (ISSLASH (p[2]) || !p[2]))
 	return 1;
 
-      do
+      while (! ISSLASH (*p))
 	{
 	  if (! *p++)
 	    return 0;
 	}
-      while (! ISSLASH (*p));
     }
 }