Do not allow escaping the subprojects directory.

Fixes #2306
mesonbuild · Oct 19, 2017 · 6083eb2 · 6083eb2
1 parent fd86048
commit 6083eb2
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/mesonbuild/interpreter.py b/mesonbuild/interpreter.py
@@ -1663,6 +1663,8 @@ def func_subproject(self, nodes, args, kwargs):
         return self.do_subproject(dirname, kwargs)
 
     def do_subproject(self, dirname, kwargs):
+        if '/' in dirname or '\\' in dirname:
+            raise InterpreterException('Subproject name must not contain a path separator.')
         if dirname in self.subproject_stack:
             fullstack = self.subproject_stack + [dirname]
             incpath = ' => '.join(fullstack)