Mirrors/chatmail-core
1
0
Fork 0
mirror of https://github.com/chatmail/core.git synced 2026-05-02 04:46:29 +03:00
Code Issues Packages Projects Releases Wiki Activity

Avoid panic in sanitise_name()

Browse Source 
.truncate() is not safe because it panics if string length does not
lie on character boundary. We convert the string to characters and take
first n character instead.
This commit is contained in:
Alexander Krotov
2020-01-25 04:49:13 +03:00
committed by Floris Bruynooghe
parent ebab893330
commit bf3eab453c
1 changed files with 6 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
src/blob.rs
View File

@@ -322,13 +322,12 @@ impl<'a> BlobObject<'a> {
let clean = sanitize_filename::sanitize_with_options(name, opts); let clean = sanitize_filename::sanitize_with_options(name, opts);
let mut iter = clean.splitn(2, '.'); let mut iter = clean.splitn(2, '.');
let mut stem = iter.next().unwrap_or_default().to_string(); let stem: String = iter.next().unwrap_or_default().chars().take(64).collect();
let mut ext = iter.next().unwrap_or_default().to_string(); let ext: String = iter.next().unwrap_or_default().chars().take(32).collect();
stem.truncate(64); if ext.is_empty() {
ext.truncate(32); (stem, "".to_string())
match ext.len() { } else {
0 => (stem, "".to_string()), (stem, format!(".{}", ext).to_lowercase())
_ => (stem, format!(".{}", ext).to_lowercase()),
} }
} }