summaryrefslogtreecommitdiffstats
path: root/lib/private
diff options
context:
space:
mode:
authorJoas Schilling <coding@schilljs.com>2016-11-02 09:23:01 +0100
committerRoeland Jago Douma <roeland@famdouma.nl>2016-11-21 09:23:32 +0100
commit4652d203e37d06b427872888ccb17227c1e0818b (patch)
tree8941085906e572ca0b6114d7c9417e6eafab0f6a /lib/private
parentba9b17c9069c5d9fe8595ffd306647f33067c927 (diff)
downloadnextcloud-server-4652d203e37d06b427872888ccb17227c1e0818b.tar.gz
nextcloud-server-4652d203e37d06b427872888ccb17227c1e0818b.zip
Make sure we don't scan files that can not be accessed
Signed-off-by: Joas Schilling <coding@schilljs.com>
Diffstat (limited to 'lib/private')
-rw-r--r--lib/private/Files/Cache/Scanner.php21
1 files changed, 21 insertions, 0 deletions
diff --git a/lib/private/Files/Cache/Scanner.php b/lib/private/Files/Cache/Scanner.php
index 28f7be0b65a..237934db7a5 100644
--- a/lib/private/Files/Cache/Scanner.php
+++ b/lib/private/Files/Cache/Scanner.php
@@ -132,6 +132,24 @@ class Scanner extends BasicEmitter implements IScanner {
*/
public function scanFile($file, $reuseExisting = 0, $parentId = -1, $cacheData = null, $lock = true) {
+ if (!\OC::$server->getDatabaseConnection()->supports4ByteText()) {
+ // verify database - e.g. mysql only 3-byte chars
+ if (preg_match('%(?:
+ \xF0[\x90-\xBF][\x80-\xBF]{2} # planes 1-3
+ | [\xF1-\xF3][\x80-\xBF]{3} # planes 4-15
+ | \xF4[\x80-\x8F][\x80-\xBF]{2} # plane 16
+)%xs', $file)) {
+ // 4-byte characters are not supported in file names
+ return null;
+ }
+ }
+
+ try {
+ $this->storage->verifyPath(dirname($file), basename($file));
+ } catch (\Exception $e) {
+ return null;
+ }
+
// only proceed if $file is not a partial file nor a blacklisted file
if (!self::isPartialFile($file) and !Filesystem::isFileBlacklisted($file)) {
@@ -167,6 +185,9 @@ class Scanner extends BasicEmitter implements IScanner {
// scan the parent if it's not in the cache (id -1) and the current file is not the root folder
if ($file and $parentId === -1) {
$parentData = $this->scanFile($parent);
+ if (!$parentData) {
+ return null;
+ }
$parentId = $parentData['fileid'];
}
if ($parent) {