ACL: Disallow '/' characters in queue names specified for "queue="

[exim.git] / src / src / acl.c

diff --git a/src/src/acl.c b/src/src/acl.c
index 477b059a59bff98ac68f2d9c0d070f8d7a03a422..b8a4b8865b2a8dd1bedbb11ef0f387de6f6543e5 100644 (file)
--- a/src/src/acl.c
+++ b/src/src/acl.c
@@ -3597,6 +3597,12 @@ for (; cb != NULL; cb = cb->next)
     #endif
 
     case ACLC_QUEUE:
+    if (Ustrchr(arg, '/'))
+      {
+      *log_msgptr = string_sprintf(
+             "Directory separator not permitted in queue name: '%s'", arg);
+      return ERROR;
+      }
     queue_name = string_copy_malloc(arg);
     break;