NetPlay: Check file names when receiving GCI folder

This commit is contained in:
Techjar
2021-05-28 07:11:52 -04:00
parent b3a414ea9d
commit 1377f31cf8
3 changed files with 19 additions and 4 deletions

View File

@ -905,7 +905,8 @@ unsigned int NetPlayClient::OnData(sf::Packet& packet)
std::string file_name;
packet >> file_name;
if (!DecompressPacketIntoFile(packet, path + DIR_SEP + file_name))
if (!Common::IsFileNameSafe(file_name) ||
!DecompressPacketIntoFile(packet, path + DIR_SEP + file_name))
{
SyncSaveDataResponse(false);
return 0;