Re: Per-SSID lease file?
Roy Marples
Mon Feb 09 16:36:39 2015
Hi
On 09/02/2015 15:55, Pierre-Hugues Husson wrote:
> I'm happy to see that.
>
> I still have one concern, what to do with SSID:
> In my understanding, your print_string returns an error if the SSID has
> "wrong" characters, imho it should only drop wrong characters.
> Also, it's not dropping / or . symbols, and I'm not confident in saying
> it can't be used as a security flaw
ESCSTRING dictates that no characters are dropped, just escaped
so a NUL character is translated to a 4 character string of \000
But you are correct about / and .
I will add some more tests to escape special file paths.
errno is set, but that's about it.
Roy
Archive administrator: postmaster@marples.name