diff --git a/bin/lib/Tracker.py b/bin/lib/Tracker.py index b09a1d3e..020a56c4 100755 --- a/bin/lib/Tracker.py +++ b/bin/lib/Tracker.py @@ -104,8 +104,12 @@ def is_valid_default_yara_rule(yara_rule): filename = os.path.join(yara_dir, yara_rule) filename = os.path.realpath(filename) + print(yara_dir) + print(filename) + # incorrect filename if not os.path.commonprefix([filename, yara_dir]) == yara_dir: + print('error: file transversal') return False else: if os.path.isfile(filename):