RomkaZVO/xash3d-fwgs
1
0
Fork 0
mirror of https://github.com/FWGS/xash3d-fwgs.git synced 2026-08-05 03:24:56 +08:00
Code Issues Packages Projects Releases Wiki Activity

engine: pass customization file fragments into IsSafeFileToDownload

Browse Source 
This function already validates customization filenames.
This commit is contained in:
a1batross
2026-05-20 01:03:03 +05:00
committed by GitHub
parent de585f80fb
commit 4c2302ec6c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
engine/common/net_chan.c
View File

@@ -1244,7 +1244,7 @@ qboolean Netchan_CopyFileFragments( netchan_t *chan, sizebuf_t *msg )
Netchan_FlushIncoming( chan, FRAG_FILE_STREAM ); Netchan_FlushIncoming( chan, FRAG_FILE_STREAM );
return false; return false;
} }
else if( filename[0] != '!' && ( COM_CheckNastyPath( filename ) || !COM_IsSafeFileToDownload( filename ))) else if( COM_CheckNastyPath( filename ) || !COM_IsSafeFileToDownload( filename ))
{ {
Con_Printf( S_ERROR "file fragment received with bad path, ignoring\n" ); Con_Printf( S_ERROR "file fragment received with bad path, ignoring\n" );
Netchan_FlushIncoming( chan, FRAG_FILE_STREAM ); Netchan_FlushIncoming( chan, FRAG_FILE_STREAM );