From 887ee0e86d0db01c466b3aac84a2d6a1a96358bd Mon Sep 17 00:00:00 2001 From: Max-Wilhelm Bruker Date: Tue, 22 May 2012 21:43:22 +0200 Subject: [PATCH] fixed server security issue concerning deck deletion --- servatrice/src/serversocketinterface.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/servatrice/src/serversocketinterface.cpp b/servatrice/src/serversocketinterface.cpp index ecd1c000..5878e4b3 100644 --- a/servatrice/src/serversocketinterface.cpp +++ b/servatrice/src/serversocketinterface.cpp @@ -361,7 +361,7 @@ ResponseCode ServerSocketInterface::cmdDeckDelDir(Command_DeckDelDir *cmd, Comma servatrice->checkSql(); int basePathId = getDeckPathId(cmd->getPath()); - if (basePathId == -1) + if ((basePathId == -1) || (basePathId == 0)) return RespNameNotFound; deckDelDirHelper(basePathId); return RespOk;