]> git.ipfire.org Git - thirdparty/open-vm-tools.git/commit
Validate user names and file paths
authorJohn Wolfe <john.wolfe@broadcom.com>
Mon, 5 May 2025 22:58:03 +0000 (15:58 -0700)
committerJohn Wolfe <john.wolfe@broadcom.com>
Fri, 9 May 2025 12:57:24 +0000 (05:57 -0700)
commit6331ea0150b98316b3f41b4cdcff52ae9fc7d791
tree961c949164551e02644bc193f202106df59a36cf
parentf2ca37ef3510543172657b82493d1eceefa9a134
Validate user names and file paths

Prevent usage of illegal characters in user names and file paths.
Also, disallow unexpected symlinks in file paths.

This patch contains changes to common source files not applicable
to open-vm-tools.

All files being updated should be consider to have the copyright to
be updated to:

 * Copyright (c) XXXX-2025 Broadcom. All Rights Reserved.
 * The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.

The 2025 Broadcom copyright information update is not part of this
patch set to allow the patch to be easily applied to previous
open-vm-tools source releases.
open-vm-tools/vgauth/common/VGAuthUtil.c
open-vm-tools/vgauth/common/VGAuthUtil.h
open-vm-tools/vgauth/common/prefs.h
open-vm-tools/vgauth/common/usercheck.c
open-vm-tools/vgauth/serviceImpl/alias.c
open-vm-tools/vgauth/serviceImpl/service.c
open-vm-tools/vgauth/serviceImpl/serviceInt.h