Jerry/bird
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Conf: Make 'configure check' command restricted

Browse source 
While it does not directly change BIRD state, it can trigger reading
arbitrary files and eating significant memory.
This commit is contained in:
Ondrej Zajicek 2022-11-09 22:02:46 +01:00
parent 371eb49043
commit bbac9ca958
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
sysdep/unix/main.c
View file

@ -282,6 +282,9 @@ cmd_read_config(const char *name)
void void
cmd_check_config(const char *name) cmd_check_config(const char *name)
{ {
if (cli_access_restricted())
return;
struct config *conf = cmd_read_config(name); struct config *conf = cmd_read_config(name);
if (!conf) if (!conf)
return; return;