diff options
Diffstat (limited to 'source3/smbd/vfs.c')
| -rw-r--r-- | source3/smbd/vfs.c | 30 |
1 files changed, 22 insertions, 8 deletions
diff --git a/source3/smbd/vfs.c b/source3/smbd/vfs.c index bc6fd18b8e..873e65e4a4 100644 --- a/source3/smbd/vfs.c +++ b/source3/smbd/vfs.c @@ -956,14 +956,28 @@ NTSTATUS check_reduced_name(connection_struct *conn, const char *fname) } /* Check for widelinks allowed. */ - if (!lp_widelinks(SNUM(conn)) - && (strncmp(conn->connectpath, resolved_name, - strlen(conn->connectpath)) != 0)) { - DEBUG(2, ("reduce_name: Bad access attempt: %s is a symlink outside the share path", fname)); - if (free_resolved_name) { - SAFE_FREE(resolved_name); - } - return NT_STATUS_ACCESS_DENIED; + if (!lp_widelinks(SNUM(conn))) { + const char *conn_rootdir; + + conn_rootdir = SMB_VFS_CONNECTPATH(conn, fname); + if (conn_rootdir == NULL) { + DEBUG(2, ("check_reduced_name: Could not get conn_rootdir\n")); + if (free_resolved_name) { + SAFE_FREE(resolved_name); + } + return NT_STATUS_ACCESS_DENIED; + } + + if (strncmp(conn_rootdir, resolved_name, + strlen(conn_rootdir)) != 0) { + DEBUG(2, ("reduce_name: Bad access attempt: %s is " + "a symlink outside the share path", + fname)); + if (free_resolved_name) { + SAFE_FREE(resolved_name); + } + return NT_STATUS_ACCESS_DENIED; + } } /* Check if we are allowing users to follow symlinks */ |