X-Git-Url: https://git.dogcows.com/gitweb?p=chaz%2Fopenbox;a=blobdiff_plain;f=obt%2Fddfile.c;h=05c3f1dde0301d78cafbd04c52c71dc9b56b3c20;hp=e0c7f9863aad7e0d06fa7c2b7d7f2528cbe516a5;hb=4968f7c62a3c072eb98702813b870a9aab58144d;hpb=70e819a905bd3b80053e3c90c6459d2b9e0b893c

diff --git a/obt/ddfile.c b/obt/ddfile.c
index e0c7f986..05c3f1dd 100644
--- a/obt/ddfile.c
+++ b/obt/ddfile.c
@@ -96,7 +96,7 @@ static gchar* parse_string(const gchar *in, gboolean locale,
     if (!locale) {
         end = in + bytes;
         for (i = in; i < end; ++i) {
-            if (*i > 127) {
+            if (*i > 126 || *i < 32) { /* non-control character ascii */
                 end = i;
                 parse_error("Invalid bytes in string", parse, error);
                 break;
@@ -128,6 +128,10 @@ static gchar* parse_string(const gchar *in, gboolean locale,
         }
         else if (*i == '\\')
             backslash = TRUE;
+        else if (*i >= 127 || *i < 32) { /* avoid ascii control characters */
+            parse_error("Found control character in string", parse, error);
+            break;
+        }
         else {
             memcpy(o, i, next-i);
             o += next-i;