Untaint identity filenames.

1 files changed, 2 insertions, 1 deletions

diff --git a/cli/icevault b/cli/icevault
index 93a4768..eb8c343 100755
--- a/cli/icevault
+++ b/cli/icevault
@@ -339,7 +339,8 @@ sub getIdentityFile($) {
                            $1 eq 'h' ? $h :
                            $1 eq 'i' ? $i :
                            die "Invalid placeholder %$1" }ge;
-    return $filename;
+    $filename =~ /\A(\p{Print}+)\z/ or error "Insecure C<%s>", $filename; # untaint $filename
+    return $1;
 }
 
 # Decrypt the given identity file and return the YAML-parsed form.