From: Yu Watanabe Date: Sun, 22 Jun 2025 05:44:04 +0000 (+0900) Subject: sysupdate: use path_is_safe() X-Git-Tag: v258-rc1~270 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=04fd0b9ff0bfb702733aa351111a73dfdcdc73db;p=thirdparty%2Fsystemd.git sysupdate: use path_is_safe() path_is_safe(...) is an alias of path_is_valid_full(..., false). --- diff --git a/src/sysupdate/sysupdate-transfer.c b/src/sysupdate/sysupdate-transfer.c index 0916aacab28..104da0a68df 100644 --- a/src/sysupdate/sysupdate-transfer.c +++ b/src/sysupdate/sysupdate-transfer.c @@ -1130,7 +1130,7 @@ int transfer_acquire_instance(Transfer *t, Instance *i, TransferProgress cb, voi if (RESOURCE_IS_FILESYSTEM(t->target.type)) { - if (!path_is_valid_full(formatted_pattern, /* accept_dot_dot = */ false)) + if (!path_is_safe(formatted_pattern)) return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Formatted pattern is not suitable as file name, refusing: %s", formatted_pattern); t->final_path = path_join(t->target.path, formatted_pattern);