From 894cd49ac4679f3dd137c98e6fbcecae4ad9ec43 Mon Sep 17 00:00:00 2001 From: Christian Ebner Date: Tue, 16 Jul 2019 18:19:41 +0200 Subject: [PATCH] src/pxar/sequential_decoder.rs: Also check for nul bytes when reading the filename Check if the filename does not contain invalid nul byes when reading it from the archive. Signed-off-by: Christian Ebner --- src/pxar/sequential_decoder.rs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/pxar/sequential_decoder.rs b/src/pxar/sequential_decoder.rs index 42bfb7de..11d71590 100644 --- a/src/pxar/sequential_decoder.rs +++ b/src/pxar/sequential_decoder.rs @@ -129,8 +129,8 @@ impl <'a, R: Read, F: Fn(&Path) -> Result<(), Error>> SequentialDecoder<'a, R, F bail!("found invalid filename '.' or '..'."); } - if buffer.iter().find(|b| (**b == b'/')).is_some() { - bail!("found invalid filename with slashes."); + if buffer.iter().find(|b| (**b == b'/' || **b == b'\0')).is_some() { + bail!("found invalid filename with slashes or nul bytes."); } let name = std::ffi::OsString::from_vec(buffer);