Prevent leakage of information about anonymous user's homedir

via 'QUOTE CWD'.

Reviewed by:	des
This commit is contained in:
Daniel O'Callaghan 2000-11-26 23:33:36 +00:00
parent 32704e5747
commit 3fbaa839f9
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=69234

View File

@ -500,8 +500,12 @@ cmd
}
| CWD check_login CRLF
{
if ($2)
cwd(pw->pw_dir);
if ($2) {
if (guest)
cwd("/");
else
cwd(pw->pw_dir);
}
}
| CWD check_login SP pathname CRLF
{