hardcoresushi/libgocryptfs
1
0
Fork 0
Code Issues Pull Requests Releases Activity

badname: stop trying to decrypt at length 22

Browse Source 
At least 16 bytes due to AES --> at least 22 characters in base64
This commit is contained in:
Jakob Unterwurzacher 2020-06-06 12:49:45 +02:00
parent a8230d271f
commit 261cf12829
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
internal/nametransform/names.go
View File

@ -61,8 +61,10 @@ func (n *NameTransform) DecryptName(cipherName string, iv []byte) (string, error
for _, pattern := range n.BadnamePatterns { for _, pattern := range n.BadnamePatterns {
match, err := filepath.Match(pattern, cipherName) match, err := filepath.Match(pattern, cipherName)
if err == nil && match { // Pattern should have been validated already if err == nil && match { // Pattern should have been validated already
//find longest decryptable substring // Find longest decryptable substring
for charpos := len(cipherName) - 1; charpos > 0; charpos-- { // At least 16 bytes due to AES --> at least 22 characters in base64
nameMin := n.B64.EncodedLen(aes.BlockSize)
for charpos := len(cipherName) - 1; charpos >= nameMin; charpos-- {
res, err = n.decryptName(cipherName[:charpos], iv) res, err = n.decryptName(cipherName[:charpos], iv)
if err == nil { if err == nil {
return res + cipherName[charpos:] + " GOCRYPTFS_BAD_NAME", nil return res + cipherName[charpos:] + " GOCRYPTFS_BAD_NAME", nil