mirror of
https://github.com/dolphin-emu/dolphin.git
synced 2025-07-31 01:59:52 -06:00
IOS HLE: More robust escaping of NAND paths
Prevents path traversal without needing an absolute path function, and also improves accuracy (character sequences like ../ appear to have no special meaning in IOS). This removes the creation and usage of /sys/replace, because the new escapes are too complicated to all be representable in its format and because no other NAND handling software seems to use /sys/replace.
This commit is contained in:
@ -157,24 +157,7 @@ struct DEntry
|
||||
{
|
||||
std::string filename = std::string((char*)Makercode, 2) + '-' +
|
||||
std::string((char*)Gamecode, 4) + '-' + (char*)Filename + ".gci";
|
||||
static Common::replace_v replacements;
|
||||
if (replacements.size() == 0)
|
||||
{
|
||||
Common::ReadReplacements(replacements);
|
||||
// Cannot add \r to replacements file due to it being a line ending char
|
||||
// / might be ok, but we need to verify that this is only used on filenames
|
||||
// as it is a dir_sep
|
||||
replacements.push_back(std::make_pair('\r', std::string("__0d__")));
|
||||
replacements.push_back(std::make_pair('/', std::string("__2f__")));
|
||||
}
|
||||
|
||||
// Replaces chars that FAT32 can't support with strings defined in /sys/replace
|
||||
for (auto& replacement : replacements)
|
||||
{
|
||||
for (size_t j = 0; (j = filename.find(replacement.first, j)) != filename.npos; ++j)
|
||||
filename.replace(j, 1, replacement.second);
|
||||
}
|
||||
return filename;
|
||||
return Common::EscapeFileName(filename);
|
||||
}
|
||||
|
||||
u8 Gamecode[4]; // 0x00 0x04 Gamecode
|
||||
|
@ -30,8 +30,6 @@
|
||||
|
||||
#include "Core/HW/WiiSaveCrypted.h"
|
||||
|
||||
static Common::replace_v replacements;
|
||||
|
||||
const u8 CWiiSaveCrypted::s_sd_key[16] = {0xAB, 0x01, 0xB9, 0xD8, 0xE1, 0x62, 0x2B, 0x08,
|
||||
0xAF, 0xBA, 0xD8, 0x4D, 0xBF, 0xC2, 0xA5, 0x5D};
|
||||
const u8 CWiiSaveCrypted::s_md5_blanker[16] = {0x0E, 0x65, 0x37, 0x81, 0x99, 0xBE, 0x45, 0x17,
|
||||
@ -102,7 +100,6 @@ void CWiiSaveCrypted::ExportAllSaves()
|
||||
CWiiSaveCrypted::CWiiSaveCrypted(const std::string& filename, u64 title_id)
|
||||
: m_encrypted_save_path(filename), m_title_id(title_id)
|
||||
{
|
||||
Common::ReadReplacements(replacements);
|
||||
memcpy(m_sd_iv, "\x21\x67\x12\xE6\xAA\x1F\x68\x9F\x95\xC5\xA2\x23\x24\xDC\x6A\x98", 0x10);
|
||||
|
||||
if (!title_id) // Import
|
||||
@ -340,12 +337,8 @@ void CWiiSaveCrypted::ImportWiiSaveFiles()
|
||||
}
|
||||
else
|
||||
{
|
||||
std::string filename((char*)file_hdr_tmp.name);
|
||||
for (const Common::replace_t& replacement : replacements)
|
||||
{
|
||||
for (size_t j = 0; (j = filename.find(replacement.first, j)) != filename.npos; ++j)
|
||||
filename.replace(j, 1, replacement.second);
|
||||
}
|
||||
std::string filename =
|
||||
Common::EscapeFileName(reinterpret_cast<const char*>(file_hdr_tmp.name));
|
||||
|
||||
std::string file_path_full = m_wii_title_path + filename;
|
||||
File::CreateFullPath(file_path_full);
|
||||
@ -388,7 +381,6 @@ void CWiiSaveCrypted::ExportWiiSaveFiles()
|
||||
for (u32 i = 0; i < m_files_list_size; i++)
|
||||
{
|
||||
FileHDR file_hdr_tmp;
|
||||
std::string name;
|
||||
memset(&file_hdr_tmp, 0, FILE_HDR_SZ);
|
||||
|
||||
u32 file_size = 0;
|
||||
@ -407,15 +399,8 @@ void CWiiSaveCrypted::ExportWiiSaveFiles()
|
||||
file_hdr_tmp.size = Common::swap32(file_size);
|
||||
file_hdr_tmp.Permissions = 0x3c;
|
||||
|
||||
name = m_files_list[i].substr(m_wii_title_path.length() + 1);
|
||||
|
||||
for (const Common::replace_t& repl : replacements)
|
||||
{
|
||||
for (size_t j = 0; (j = name.find(repl.second, j)) != name.npos; ++j)
|
||||
{
|
||||
name.replace(j, repl.second.length(), 1, repl.first);
|
||||
}
|
||||
}
|
||||
std::string name =
|
||||
Common::UnescapeFileName(m_files_list[i].substr(m_wii_title_path.length() + 1));
|
||||
|
||||
if (name.length() > 0x44)
|
||||
{
|
||||
|
@ -16,25 +16,16 @@
|
||||
#include "Core/IPC_HLE/WII_IPC_HLE_Device_FileIO.h"
|
||||
#include "Core/IPC_HLE/WII_IPC_HLE_Device_fs.h"
|
||||
|
||||
static Common::replace_v replacements;
|
||||
|
||||
static std::map<std::string, std::weak_ptr<File::IOFile>> openFiles;
|
||||
|
||||
// This is used by several of the FileIO and /dev/fs functions
|
||||
std::string HLE_IPC_BuildFilename(std::string path_wii)
|
||||
std::string HLE_IPC_BuildFilename(const std::string& wii_path)
|
||||
{
|
||||
std::string path_full = File::GetUserPath(D_SESSION_WIIROOT_IDX);
|
||||
std::string nand_path = File::GetUserPath(D_SESSION_WIIROOT_IDX);
|
||||
if (wii_path.empty() || wii_path[0] != '/')
|
||||
return nand_path;
|
||||
|
||||
// Replaces chars that FAT32 can't support with strings defined in /sys/replace
|
||||
for (auto& replacement : replacements)
|
||||
{
|
||||
for (size_t j = 0; (j = path_wii.find(replacement.first, j)) != path_wii.npos; ++j)
|
||||
path_wii.replace(j, 1, replacement.second);
|
||||
}
|
||||
|
||||
path_full += path_wii;
|
||||
|
||||
return path_full;
|
||||
return nand_path + Common::EscapePath(wii_path);
|
||||
}
|
||||
|
||||
void HLE_IPC_CreateVirtualFATFilesystem()
|
||||
@ -76,7 +67,6 @@ CWII_IPC_HLE_Device_FileIO::CWII_IPC_HLE_Device_FileIO(u32 device_id,
|
||||
const std::string& device_name)
|
||||
: IWII_IPC_HLE_Device(device_id, device_name, false) // not a real hardware
|
||||
{
|
||||
Common::ReadReplacements(replacements);
|
||||
}
|
||||
|
||||
CWII_IPC_HLE_Device_FileIO::~CWII_IPC_HLE_Device_FileIO()
|
||||
|
@ -18,7 +18,7 @@ namespace File
|
||||
class IOFile;
|
||||
}
|
||||
|
||||
std::string HLE_IPC_BuildFilename(std::string _pFilename);
|
||||
std::string HLE_IPC_BuildFilename(const std::string& wii_path);
|
||||
void HLE_IPC_CreateVirtualFATFilesystem();
|
||||
|
||||
class CWII_IPC_HLE_Device_FileIO : public IWII_IPC_HLE_Device
|
||||
|
@ -22,12 +22,9 @@
|
||||
#include "Core/IPC_HLE/WII_IPC_HLE_Device_FileIO.h"
|
||||
#include "Core/IPC_HLE/WII_IPC_HLE_Device_fs.h"
|
||||
|
||||
static Common::replace_v replacements;
|
||||
|
||||
CWII_IPC_HLE_Device_fs::CWII_IPC_HLE_Device_fs(u32 _DeviceID, const std::string& _rDeviceName)
|
||||
: IWII_IPC_HLE_Device(_DeviceID, _rDeviceName)
|
||||
{
|
||||
Common::ReadReplacements(replacements);
|
||||
}
|
||||
|
||||
CWII_IPC_HLE_Device_fs::~CWII_IPC_HLE_Device_fs()
|
||||
@ -132,10 +129,9 @@ IPCCommandResult CWII_IPC_HLE_Device_fs::IOCtlV(u32 _CommandAddress)
|
||||
{
|
||||
for (File::FSTEntry& child : entry.children)
|
||||
{
|
||||
// Decode entities of invalid file system characters so that
|
||||
// games (such as HP:HBP) will be able to find what they expect.
|
||||
for (const Common::replace_t& r : replacements)
|
||||
child.virtualName = ReplaceAll(child.virtualName, r.second, {r.first});
|
||||
// Decode escaped invalid file system characters so that games (such as
|
||||
// Harry Potter and the Half-Blood Prince) can find what they expect.
|
||||
child.virtualName = Common::UnescapeFileName(child.virtualName);
|
||||
}
|
||||
|
||||
std::sort(entry.children.begin(), entry.children.end(),
|
||||
|
Reference in New Issue
Block a user