Go to file
Frediano Ziglio e2ced9f094 Avoid to use names with reserved characters.
Some characters are reserved and should not be used in Windows
independently by the file system used.
This avoid to use paths in the filename which could lead to some
nasty hacks (like names like "..\hack.txt").
The return statement cause the file transfer to be aborted with
VD_AGENT_FILE_XFER_STATUS_ERROR as status.

":" is used to separate filenames from stream names and can be used
to create hidden streams. Also is used for drive separator (A:)
or device names (NUL:).
"/" and "\" are reserved for components (directory, filename, drive,
share, server) separators.
"*" and "?" are wildcards (which on Windows are supported by
different APIs too).
"<", ">", """ and "|" are reserved for shell usage.

More information on "Naming Files, Paths, and Namespaces" page at
https://msdn.microsoft.com/en-us/library/windows/desktop/aa365247(v=vs.85).aspx

This fixes also https://bugzilla.redhat.com/show_bug.cgi?id=1520393.

Signed-off-by: Frediano Ziglio <fziglio@redhat.com>
Acked-by: Christophe Fergeau <cfergeau@redhat.com>
2018-05-25 14:04:49 +01:00
build-aux build-sys: Use git-version-gen 2012-10-31 10:11:47 +01:00
common Add a test for logging functions 2017-07-26 16:16:16 +01:00
spice-protocol@666b5c5780 Check for set-monitors-position capability from client. 2015-08-06 12:01:45 +02:00
tests clipboard tester 2010-08-23 19:43:39 +03:00
vdagent Avoid to use names with reserved characters. 2018-05-25 14:04:49 +01:00
vdservice Prevent possible future buffer overflow 2017-07-26 08:52:15 +01:00
.gitmodules Use spice-protocol submodule 2012-05-24 13:55:31 +02:00
autogen.sh build-sys: Fix autogen.sh permissions 2012-10-01 19:20:22 +02:00
configure.ac Do not use dash in rpm version 2017-08-07 12:20:59 +01:00
git.mk Update git.mk file 2017-07-27 11:03:50 +01:00
Makefile.am Ignore auxiliary build files 2017-07-27 11:03:56 +01:00
mingw-spice-vdagent.spec.in Do not use dash in rpm version 2017-08-07 12:20:59 +01:00
NEWS build: Update NEWS file for 0.9.0 release 2017-08-14 12:57:33 +03:00
spice-vdagent.wxs.in Update project URL 2017-07-07 09:45:28 +01:00
test-log Add a test for logging functions 2017-07-26 16:16:16 +01:00
test-png Add test for PNG files 2017-07-26 10:51:15 +01:00
vdagent.sln Revert "vdagent: add vdagent_helper to support mouse when UAC dialog takes focus" 2013-04-22 11:17:40 +03:00