We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 37ea437 commit 7b52088Copy full SHA for 7b52088
1 file changed
sanitizers/src/main/java/com/code_intelligence/jazzer/sanitizers/FilePathTraversal.java
@@ -342,7 +342,14 @@ private static void check(Path p) {
342
return;
343
}
344
345
- if (p.toAbsolutePath().normalize().equals(ABSOLUTE_TARGET)) {
+ // catch all exceptions that might be thrown by the sanitizer
346
+ Path normalized;
347
+ try {
348
+ normalized = p.toAbsolutePath().normalize();
349
+ } catch (InvalidPathException e) {
350
+ return;
351
+ }
352
+ if (normalized.equals(ABSOLUTE_TARGET)) {
353
Jazzer.reportFindingFromHook(new FuzzerSecurityIssueCritical("File path traversal: " + p));
354
355
0 commit comments