Revision: 48448
          http://brlcad.svn.sourceforge.net/brlcad/?rev=48448&view=rev
Author:   bob1961
Date:     2012-01-11 22:39:44 +0000 (Wed, 11 Jan 2012)
Log Message:
-----------
run 5, CID 1927, tainted string. Atleast check to make sure the string is not 
NULL and consists of printable characters.

Modified Paths:
--------------
    brlcad/trunk/src/conv/intaval/tgf-g.cpp

Modified: brlcad/trunk/src/conv/intaval/tgf-g.cpp
===================================================================
--- brlcad/trunk/src/conv/intaval/tgf-g.cpp     2012-01-11 22:19:04 UTC (rev 
48447)
+++ brlcad/trunk/src/conv/intaval/tgf-g.cpp     2012-01-11 22:39:44 UTC (rev 
48448)
@@ -64,8 +64,14 @@
                    ret = 1;
                }
                else {
-                   struct rt_wdb* wdbp = wdb_fopen(argv[3]); // force create
+                   struct rt_wdb* wdbp;
 
+                   if (!bu_str_isprint(argv[3])) {
+                       std::cout << "Invalid BRL-G filename" << std::endl;
+                       return 1;
+                   }
+
+                   wdbp = wdb_fopen(argv[3]); // force create
                    conv(is, wdbp);
                    createRegions(wdbp);
                    wdb_close(wdbp);

This was sent by the SourceForge.net collaborative development platform, the 
world's largest Open Source development site.


------------------------------------------------------------------------------
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual 
desktops for less than the cost of PCs and save 60% on VDI infrastructure 
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
_______________________________________________
BRL-CAD Source Commits mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/brlcad-commits

Reply via email to