1. 02 Nov, 2008 29 commits
  2. 01 Nov, 2008 9 commits
  3. 31 Oct, 2008 2 commits
    • Max Kellermann's avatar
      path: removed sanitizePathDup() · 9fdac529
      Max Kellermann authored
      We don't need to sanitize the path, because the mapper already checks
      for malformed paths.
      9fdac529
    • Max Kellermann's avatar
      mapper: check for "." and ".." · f2918767
      Max Kellermann authored
      Make map_directory_child_fs() refuse the names "." and "..".  This is
      currently the interface where an attacker may inject a manipulated
      path (through the "update" command).
      f2918767