FTP/TFTP: Fix directory traversal regression, reported by Aaron Esau

Signed-off-by: Joachim Nilsson <troglobit@gmail.com>
troglobit · Aug 31, 2019 · 455b47d · 455b47d · abergmann · Dec 21, 2020
1 parent 0fb2c03
commit 455b47d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/common.c b/src/common.c
@@ -92,7 +92,7 @@ char *compose_path(ctrl_t *ctrl, char *path)
 		strlcat(rpath, name, sizeof(rpath));
 	}
 
-	if (!chrooted && strncmp(dir, home, strlen(home))) {
+	if (!chrooted && strncmp(rpath, home, strlen(home))) {
 		DBG("Failed non-chroot dir:%s vs home:%s", dir, home);
 		return NULL;
 	}