xdvdfs-tools/patches/xdvdfs-tools-2.1-fnamefix.patch

--- XDVDFS_Tools.orig/src/xdvdfs/xdvdfs.c	2003-08-15 23:26:58.000000000 +0000
+++ XDVDFS_Tools/src/xdvdfs/xdvdfs.c	2005-05-21 12:13:55.655839216 +0000
@@ -157,6 +157,14 @@
 	memcpy(SearchRecord->Filename, Entry->Filename, Entry->FilenameLength);
 	SearchRecord->Filename[Entry->FilenameLength] = 0;
 
+	if (strstr(SearchRecord->Filename,"..") || 
+	    strchr(SearchRecord->Filename, '/') || 
+	    strchr(SearchRecord->Filename, '\\'))
+	  {
+	    printf("Filename contains invalid characters\n");
+	    exit(1);
+	  }
+
 	// Copy file parameters in the search_rec
 	SearchRecord->Attributes = Entry->FileAttributes;
 	SearchRecord->FileSize = ENDIAN_SAFE32(Entry->FileSize);
1	niro	153	--- XDVDFS_Tools.orig/src/xdvdfs/xdvdfs.c 2003-08-15 23:26:58.000000000 +0000
2			+++ XDVDFS_Tools/src/xdvdfs/xdvdfs.c 2005-05-21 12:13:55.655839216 +0000
3			@@ -157,6 +157,14 @@
4			memcpy(SearchRecord->Filename, Entry->Filename, Entry->FilenameLength);
5			SearchRecord->Filename[Entry->FilenameLength] = 0;
6
7			+ if (strstr(SearchRecord->Filename,"..") \|\|
8			+ strchr(SearchRecord->Filename, '/') \|\|
9			+ strchr(SearchRecord->Filename, '\\'))
10			+ {
11			+ printf("Filename contains invalid characters\n");
12			+ exit(1);
13			+ }
14			+
15			// Copy file parameters in the search_rec
16			SearchRecord->Attributes = Entry->FileAttributes;
17			SearchRecord->FileSize = ENDIAN_SAFE32(Entry->FileSize);