Sophie

Sophie

distrib > Fedora > 13 > i386 > media > updates-src > by-pkgid > 0ade66b378b0926f43abeb59b1c9eb63 > files > 3

kdenetwork-4.5.5-2.fc13.src.rpm

Index: kget/ui/metalinkcreator/metalinker.cpp
===================================================================
--- kget/ui/metalinkcreator/metalinker.cpp	(Revision 1227467)
+++ kget/ui/metalinkcreator/metalinker.cpp	(Revision 1227468)
@@ -583,7 +583,13 @@
         return false;
     }
 
-    if (name.contains(QRegExp("$(\\.\\.?)?/")) || name.contains("/../") || name.endsWith("/..")) {
+    if (name.endsWith('/')) {
+        kError(5001) << "Name attribute of Metalink::File does not contain a file name:" << name;
+        return false;
+    }
+
+    const QStringList components = name.split('/');
+    if (name.startsWith('/') || components.contains("..") || components.contains(".")) {
         kError(5001) << "Name attribute of Metalink::File contains directory traversal directives:" << name;
         return false;
     }