mirror/86Box
1
0
Fork 0
mirror of https://github.com/86Box/86Box.git synced 2026-02-22 09:35:32 -07:00
Code Issues Packages Projects Releases Activity

Extra validation of input, for CodeQL

Browse Source
This commit is contained in:
Domppari
2026-01-05 10:50:02 +02:00
parent a03316e98f
commit 4ee804a5bf
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/disk/hdd_audio.c
View File

@@ -105,6 +105,15 @@ hdd_audio_load_profiles(void)
return;
}
/* Validate the path ends with our expected filename */
const char *expected_suffix = "hdd_audio_profiles.cfg";
size_t cfg_len = strlen(cfg_fn);
size_t suffix_len = strlen(expected_suffix);
if (cfg_len < suffix_len || strcmp(cfg_fn + cfg_len - suffix_len, expected_suffix) != 0) {
pclog("HDD Audio: Unexpected config path\n");
return;
}
profiles_ini = ini_read_ex(cfg_fn, 1); /* lgtm[cpp/path-injection] */
if (profiles_ini == NULL) {
pclog("HDD Audio: Failed to load hdd_audio_profiles.cfg\n");