slitaz-forge rev 720 tip
Fix critical vulnerability floppy web tool (again)
author | Pascal Bellard <pascal.bellard@slitaz.org> |
---|---|
date | Sat Aug 23 15:56:52 2025 +0000 (4 weeks ago) |
parents | dfe86fa9414f |
children | |
files | mirror/floppies/builder/index.php |
line diff
1.1 --- a/mirror/floppies/builder/index.php Sat Aug 23 14:59:41 2025 +0000 1.2 +++ b/mirror/floppies/builder/index.php Sat Aug 23 15:56:52 2025 +0000 1.3 @@ -44,9 +44,9 @@ 1.4 sprintf("fd%03d.img",$_GET['n'])); 1.5 $cmd = "cat /tmp/".$_GET['id']."/fd"; 1.6 if ($_GET['s'] != 0) { 1.7 - $cmd .= " /dev/zero | dd count=1 bs=".$_GET['s']; 1.8 + $cmd .= " /dev/zero | dd count=1 bs=".preg_replace("([^\dbBkKmMgG])", '', $_GET['s']); 1.9 if ($_GET['n'] > 1) 1.10 - $cmd .= " skip=".($_GET['n']-1); 1.11 + $cmd .= " skip=".preg_replace("([^\d])", '', $_GET['n'])-1; 1.12 } 1.13 echo `$cmd 2> /dev/null`; 1.14 exit;