From: Heiko Schlittermann (HS12-RIPE) <hs@schlittermann.de>
Date: Sun, 28 Mar 2021 09:00:06 +0000 (+0200)
Subject: appendfile
X-Git-Url: https://git.exim.org/exim.git/commitdiff_plain/c57b15de7f6654cb819cae99dea5f3f6a5c08fae

appendfile

(cherry picked from commit c29b50d2fe17cc108d751175ed4f4113c25c1768)
---

diff --git a/src/src/transports/appendfile.c b/src/src/transports/appendfile.c
index 139f9a3ef..5cefd147a 100644
--- a/src/src/transports/appendfile.c
+++ b/src/src/transports/appendfile.c
@@ -1236,6 +1236,14 @@ if (!(path = expand_string(fdname)))
     expand_string_message);
   goto ret_panic;
   }
+{ uschar *m;
+if (m = is_tainted2(path, 0, "Tainted '%s' (file or directory "
+          "name for %s transport) not permitted", path, tblock->name))
+  {
+  addr->message = m;
+  goto ret_panic;
+  }
+}
 
 if (path[0] != '/')
   {