| commit | 1902990db9c36a8c2f4a57a4389c1a0c74658584 | [log] [tgz] |
|---|---|---|
| author | Gunnar Mills <gmills@us.ibm.com> | Fri Oct 06 14:47:10 2017 -0500 |
| committer | Brad Bishop <bradleyb@fuzziesquirrel.com> | Tue Oct 24 13:42:45 2017 +0000 |
| tree | 256c223fa82e16ff540bade4123adce5ec44ebe3 | |
| parent | 1be4fabdcb00d17f3b4dc2b563125e661692948d [diff] |
Add basename for file name in download manager Added getting the basename for the output file name in download manager. This is to prevent any security holes that would let the user out of the FLASH_DOWNLOAD_PATH dir. (e.g. passing a file name of ../etc/shadow) Resolves openbmc/openbmc#1898 Change-Id: Ie33fe56599e86c29da4b2eae8ef070f0866d054c Signed-off-by: Gunnar Mills <gmills@us.ibm.com>