mischief/openbsd-src
1
0
Fork 0
mirror of https://github.com/openbsd/src.git synced 2025-01-04 23:35:36 -08:00
Code

tweak path checks. now you can create keys named ......pub

Browse Source 
by deraadt
This commit is contained in:
tedu 2014-03-16 18:12:08 +00:00
parent ead0b14b88
commit febc818197
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
usr.bin/signify/signify.c
View File

@ -1,4 +1,4 @@
/* $OpenBSD: signify.c,v 1.53 2014/03/16 18:09:49 tedu Exp $ */
/* $OpenBSD: signify.c,v 1.54 2014/03/16 18:12:08 tedu Exp $ */
/*
* Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>
*
@ -466,8 +466,8 @@ verify(const char *pubkeyfile, const char *msgfile, const char *sigfile,
if (!pubkeyfile) {
if ((pubkeyfile = strstr(comment, VERIFYWITH))) {
pubkeyfile += strlen(VERIFYWITH);
if (strstr(pubkeyfile, "/etc/signify") == NULL ||
strstr(pubkeyfile, "..") != NULL)
if (strstr(pubkeyfile, "/etc/signify/") == NULL ||
strstr(pubkeyfile, "/../") != NULL)
errx(1, "untrusted path %s", pubkeyfile);
} else
usage("need pubkey");