Commit 297d691e authored by Ted Trask's avatar Ted Trask

Modified modelfunctions library to include validation in get/setfiledetails. ...

Modified modelfunctions library to include validation in get/setfiledetails.  Modified all uses to validate the file name - this was a major security hole.

git-svn-id: svn://svn.alpinelinux.org/acf/fetchmail/trunk@1542 ab2d0c66-481e-0410-8bed-d214d4d58bed
parent 938c8119
......@@ -316,9 +316,8 @@ function get_filedetails()
end
function update_filecontent(filedetails)
filedetails.value.filename.value = configfile
-- FIXME - validation
local retval = modelfunctions.setfiledetails(filedetails)
local retval = modelfunctions.setfiledetails(filedetails, {configfile})
posix.chmod(configfile, "rwx--x---")
config = nil
return retval
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment