Merge pull request #542 from yussufsh/main

k8s-ci-robot · web-flow · commit ff8751dadb5a · 2023-12-11T06:21:20.000+01:00
Fix snyk code issue: Path Traversal
diff --git a/pkg/device/device.go b/pkg/device/device.go
@@ -213,7 +213,7 @@ func scsiHostRescan() error {
 		return err
 	}
 	for _, f := range dirs {
-		name := scsiPath + f.Name() + "/scan"
+		name := filepath.Clean(scsiPath + f.Name() + "/scan")
 		data := []byte("- - -")
 		if err := os.WriteFile(name, data, 0666); err != nil {
 			return fmt.Errorf("scsi host rescan failed: %v", err)

Original file line number	Diff line number	Diff line change
`@@ -213,7 +213,7 @@ func scsiHostRescan() error {`
`213`	`213`	`return err`
`214`	`214`	`}`
`215`	`215`	`for _, f := range dirs {`
`216`		`- name := scsiPath + f.Name() + "/scan"`
	`216`	`+ name := filepath.Clean(scsiPath + f.Name() + "/scan")`
`217`	`217`	`data := []byte("- - -")`
`218`	`218`	`if err := os.WriteFile(name, data, 0666); err != nil {`
`219`	`219`	`return fmt.Errorf("scsi host rescan failed: %v", err)`