blob: 1b06efba3a47b6cb4044ecd53db5615a0b1c9a54 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
$NetBSD: patch-aq,v 1.7 2005/01/05 10:36:23 markd Exp $
--- kioslave/ftp/ftp.cc.orig 2004-10-03 20:40:52.000000000 +1300
+++ kioslave/ftp/ftp.cc
@@ -751,6 +751,14 @@ bool Ftp::ftpSendCmd( const QCString& cm
{
assert(m_control != NULL); // must have control connection socket
+ if ( cmd.find( '\r' ) != -1 || cmd.find( '\n' ) != -1)
+ {
+ kdWarning(7102) << "Invalid command received (contains CR or LF): "
+ << cmd.data() << endl;
+ error( ERR_UNSUPPORTED_ACTION, m_host );
+ return false;
+ }
+
// Don't print out the password...
bool isPassCmd = (cmd.left(4).lower() == "pass");
if ( !isPassCmd )
|
