mirror of
https://github.com/vim/vim.git
synced 2026-05-09 13:50:00 -04:00
Yasuhiro Matsumoto
b076c49282
Problem: runtime(vimball): still path traversal attacks possible Solution: block Windows driver letter paths (Yasuhiro Matsumoto) The path traversal check in vimball#Vimball() did not reject file names starting with a Windows drive letter (e.g. "C:/foo"). Backslashes are normalized to forward slashes earlier, so UNC paths are caught by the leading-slash check, but absolute drive-letter paths slipped through and could write outside of g:vimball_home on Windows. Add a "^\a:" check next to the existing "^/" check, and cover it with a new test. closes: #19989 Signed-off-by: Yasuhiro Matsumoto <mattn.jp@gmail.com> Signed-off-by: Christian Brabandt <cb@256bit.org>
