summaryrefslogtreecommitdiffstats
path: root/ipc/ipc_message_utils.cc
diff options
context:
space:
mode:
authorcevans@chromium.org <cevans@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2013-01-03 04:11:54 +0000
committercevans@chromium.org <cevans@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2013-01-03 04:11:54 +0000
commit10cbaf017570ba6454174c55b844647aa6a9b3b4 (patch)
treebeba11e7fafcfa0479e91570bb221f221659d9b7 /ipc/ipc_message_utils.cc
parent3c47f7247a0a92f61cb86661790ac2b386ee1030 (diff)
downloadchromium_src-10cbaf017570ba6454174c55b844647aa6a9b3b4.zip
chromium_src-10cbaf017570ba6454174c55b844647aa6a9b3b4.tar.gz
chromium_src-10cbaf017570ba6454174c55b844647aa6a9b3b4.tar.bz2
Validate that paths don't contain embedded NULLs at deserialization.
BUG=166867 Review URL: https://chromiumcodereview.appspot.com/11743009 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@174935 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'ipc/ipc_message_utils.cc')
-rw-r--r--ipc/ipc_message_utils.cc3
1 files changed, 3 insertions, 0 deletions
diff --git a/ipc/ipc_message_utils.cc b/ipc/ipc_message_utils.cc
index 5e7067e..babecdc 100644
--- a/ipc/ipc_message_utils.cc
+++ b/ipc/ipc_message_utils.cc
@@ -508,6 +508,9 @@ bool ParamTraits<FilePath>::Read(const Message* m,
FilePath::StringType value;
if (!ParamTraits<FilePath::StringType>::Read(m, iter, &value))
return false;
+ // Reject embedded NULs as they can cause security checks to go awry.
+ if (value.find(FILE_PATH_LITERAL('\0')) != FilePath::StringType::npos)
+ return false;
*r = FilePath(value);
return true;
}