isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

resolve_path: skip non-regular files

Browse Source
This commit is contained in:
Todd C. Miller
2022-07-25 08:51:49 -06:00
parent 308a6c31d9
commit 15fd62f0d5
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
src/sudo_intercept.c
View File

@@ -104,6 +104,8 @@ resolve_path(const char *cmnd, char *out_cmnd, size_t out_size)
} }
if (stat(path, &sb) == 0) { if (stat(path, &sb) == 0) {
if (!S_ISREG(sb.st_mode))
continue;
if (strlcpy(out_cmnd, path, out_size) >= out_size) { if (strlcpy(out_cmnd, path, out_size) >= out_size) {
errval = ENAMETOOLONG; errval = ENAMETOOLONG;
break; break;
@@ -150,6 +152,17 @@ exec_wrapper(const char *cmnd, char * const argv[], char * const envp[],
debug_return_int(-1); debug_return_int(-1);
} }
cmnd = cmnd_buf; cmnd = cmnd_buf;
} else {
struct stat sb;
/* Absolute or relative path name. */
if (stat(cmnd, &sb) == -1) {
/* Leave errno unchanged. */
debug_return_int(-1);
} else if (!S_ISREG(sb.st_mode)) {
errno = EACCES;
debug_return_int(-1);
}
} }
# if defined(HAVE___INTERPOSE) # if defined(HAVE___INTERPOSE)