Functions to clean/scrub input for security reasons.
More...
#include <BESScrub.h>
|
|
static bool | command_line_arg_ok (const string &arg) |
| sanitize command line arguments More...
|
|
static bool | size_ok (unsigned int sz, unsigned int nelem) |
| sanitize the size of an array. Test for integer overflow when dynamically allocating an array. More...
|
|
static bool | pathname_ok (const string &path, bool strict) |
| Does the string name a potentailly valid pathname? Test the given pathname to verfiy that it is a valid name. We define this as: Contains only printable characters; and Is less then 256 characters. If strict is true, test that the pathname consists of only letters, digits, and underscore, dash and dot characters instead of the more general case where a pathname can be composed of any printable characters. More...
|
|
Definition at line 42 of file BESScrub.h.
◆ command_line_arg_ok()
bool BESScrub::command_line_arg_ok |
( |
const string & |
arg | ) |
|
|
static |
Test the given command line argument to protect against command injections
- Parameters
-
- Returns
- true if ok, false otherwise
Definition at line 52 of file BESScrub.cc.
◆ pathname_ok()
bool BESScrub::pathname_ok |
( |
const string & |
path, |
|
|
bool |
strict |
|
) |
| |
|
static |
- Note
- Using this function does not guarentee that the path is valid, only that the path could be valid. The intent is foil attacks where an exploit is encoded in a string then passed to a library function. This code does not address whether the pathname references a valid resource.
- Parameters
-
path | The pathname to test |
strict | Apply more restrictive tests (true by default) |
- Returns
- true if the pathname consists of legal characters and is of legal size, false otherwise.
Definition at line 88 of file BESScrub.cc.
References BESRegex::match().
◆ size_ok()
bool BESScrub::size_ok |
( |
unsigned int |
sz, |
|
|
unsigned int |
nelem |
|
) |
| |
|
static |
- Parameters
-
nelem | Number of elements. |
sz | size of each element. |
- Returns
- True if the
nelem
elements of sz
size will overflow an array.
Definition at line 66 of file BESScrub.cc.
The documentation for this class was generated from the following files: