mirror/86Box
1
0
Fork 0
mirror of https://github.com/86Box/86Box.git synced 2026-02-21 17:15:32 -07:00
Code Issues Packages Projects Releases Activity

Merge pull request #6674 from Domppari/hdd_audio_prototype

Browse Source 
Extra validation of input, for CodeQL
This commit is contained in:
Miran Grča
2026-01-05 13:21:46 +01:00
committed by GitHub
parent e42f1359d8 4ee804a5bf
commit eaec0cfd88
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/disk/hdd_audio.c
View File

@@ -123,6 +123,15 @@ hdd_audio_load_profiles(void)
return;
}
/* Validate the path ends with our expected filename */
const char *expected_suffix = "hdd_audio_profiles.cfg";
size_t cfg_len = strlen(cfg_fn);
size_t suffix_len = strlen(expected_suffix);
if (cfg_len < suffix_len || strcmp(cfg_fn + cfg_len - suffix_len, expected_suffix) != 0) {
pclog("HDD Audio: Unexpected config path\n");
return;
}
profiles_ini = ini_read_ex(cfg_fn, 1); /* lgtm[cpp/path-injection] */
if (profiles_ini == NULL) {
hdd_audio_log("HDD Audio: Failed to load hdd_audio_profiles.cfg\n");