commit 443060724b85062cbc1f79d4264db4343953d19a
author k4.rahul <rahul.k4@tataelxsi.co.in> Fri May 05 14:24:31 2023 +0530
committer rahulkumarr <rahul.k4@tataelxsi.co.in> Wed May 29 12:06:57 2024 +0530
tree 1444ad7b4245a2c057b55e3eb864cf626d903802
parent c03e17e4bc5bb1a507127aa986000435de3b4338

Coverity-CWE 22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Coverity fix for 137960 Filesystem path, filename, or URI manipulation

Change-Id: Ieaa291ced268216361d865427100fd48bd39ed5a
Signed-off-by: k4.rahul <rahul.k4@tataelxsi.co.in>

osm_lcm/lcm.py

diff --git a/osm_lcm/lcm.py b/osm_lcm/lcm.py
index 9b62d82..f8a97ae 100644
--- a/osm_lcm/lcm.py
+++ b/osm_lcm/lcm.py
@@ -21,6 +21,7 @@
 # DEBUG WITH PDB
 import pdb
 
+import os
 import asyncio
 import yaml
 import logging
@@ -880,6 +881,7 @@
                     file=sys.stderr,
                 )
                 exit(1)
+        config_file = os.path.realpath(os.path.normpath(os.path.abspath(config_file)))
         lcm = Lcm(config_file)
         asyncio.run(lcm.start())
     except (LcmException, getopt.GetoptError) as e: