mirrors/packwiz-installer
1
0
Fork 0
mirror of https://github.com/packwiz/packwiz-installer.git synced 2025-04-19 21:16:30 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix OutOfBoundsException when parsing a single letter path component

Browse Source
This commit is contained in:
comp500 2022-07-17 01:07:48 +01:00
parent ca172bdefc
commit 783e35cf73
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/main/kotlin/link/infra/packwiz/installer/target/path/PackwizPath.kt
View File

@ -43,6 +43,7 @@ abstract class PackwizPath<T: PackwizPath<T>>(path: String? = null) {
} else { } else {
canonicalised += componentNorm canonicalised += componentNorm
// Don't allow volume letters (allows traversal to the root on Windows) // Don't allow volume letters (allows traversal to the root on Windows)
if (componentNorm.length == 2) {
if (componentNorm[0] in 'a'..'z' || componentNorm[0] in 'A'..'Z') { if (componentNorm[0] in 'a'..'z' || componentNorm[0] in 'A'..'Z') {
if (componentNorm[1] == ':') { if (componentNorm[1] == ':') {
throw RequestException.Validation.PathContainsVolumeLetter(path) throw RequestException.Validation.PathContainsVolumeLetter(path)
@ -50,6 +51,7 @@ abstract class PackwizPath<T: PackwizPath<T>>(path: String? = null) {
} }
} }
} }
}
if (canonicalised.isEmpty()) { if (canonicalised.isEmpty()) {
this.path = null this.path = null