Check if resource name is valid in acl_access_ok()

diff --git a/bacula/src/dird/ua_acl.c b/bacula/src/dird/ua_acl.c
index 4834d5b814e4c9a9e611af8da71528b3c9ff5b8a..1a386fd75b2570e426efe214c05426b6c3a1ce8e 100644 (file)
--- a/bacula/src/dird/ua_acl.c
+++ b/bacula/src/dird/ua_acl.c
@@ -49,6 +49,11 @@ bool acl_access_ok(UAContext *ua, int acl, const char *item)
 /* This version expects the length of the item which we must check. */
 bool acl_access_ok(UAContext *ua, int acl, const char *item, int len)
 {
+   /* The resource name contains nasty characters */
+   if (acl != Where_ACL && !is_name_valid(item, NULL)) {
+      Dmsg1(1400, "Access denied for item=%s\n", item);
+      return false;
+   }
 
    /* If no console resource => default console and all is permitted */
    if (!ua->cons) {