GUACAMOLE-326: Explicitly deny attempted reads/writes to Windows named data streams (like "foo:Zone.identifier" for the file "foo").

2017-06-04 13:05:11 -07:00 · 2017-06-04 13:05:11 -07:00 · e5a1b4d8ae
commit e5a1b4d8ae
parent d9c1ce7738
1 changed files with 4 additions and 0 deletions
--- a/src/protocols/rdp/rdp_fs.c
+++ b/src/protocols/rdp/rdp_fs.c
@ -654,6 +654,10 @@ int guac_rdp_fs_normalize_path(const char* path, char* abs_path) {

        } /* end if separator */

+        /* We do not currently support named streams */
+        else if (c == ':')
+            return 1;
+
    } /* end for each character */

    /* If no components, the path is simply root */