Path validation is hard... thanks for taking this on, and fixing yet
another round of possible angles of attack.
Your patch has been applied to the master and release/2.7 branch.
The 2.6 codebase is sufficiently different here (and already fixed).
commit 588af513aac1d2d774fd3fde1716384e3501a5a1 (master)
commit f6621b1316970866cff9c711217b0fce5fe41d16 (release/2.7)
Author: Heiko Hund
Date: Mon Aug 31 20:47:04 2026 +0200
openvpnserv: harden CheckConfigPath() a bit more
Signed-off-by: Heiko Hund <[email protected]>
Acked-by: Razvan Cojocaru <[email protected]>
Acked-by: Arne Schwabe <[email protected]>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1886
Message-Id: <[email protected]>
URL:
https://www.mail-archive.com/[email protected]/msg38854.html
Signed-off-by: Gert Doering <[email protected]>
--
kind regards,
Gert Doering
_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
