Fix exploit with trailing whitespace

Src/Hyperion-kernel/boot/kernel.lua

@@ -184,9 +184,16 @@ end
 
 kernel.log("Gathering modules")
 for _, i in ipairs(ifs.list("/lib/modules")) do
-    for _,v in ipairs(ifs.list("/lib/modules/"..i)) do
+    local modlist = ifs.list("/lib/modules/"..i)
-        local prior=tonumber(v:sub(1,2))
+    if not modlist then
-        modules[prior+1][#modules[prior+1]+1]="/lib/modules/"..i.."/"..v
+        kernel.log("WARNING: could not list /lib/modules/"..i.." (skipping)", "WARN", 8)
+    else
+        for _,v in ipairs(modlist) do
+            local prior=tonumber(v:sub(1,2))
+            if prior then
+                modules[prior+1][#modules[prior+1]+1]="/lib/modules/"..i.."/"..v
+            end
+        end
     end
 end
 

Src/Hyperion-kernel/lib/modules/hyperion/10_vfs.kmod

@@ -111,7 +111,7 @@ local function makeMetafile(meta)
     return out
 end
 
-local SAFE_COMPONENT_PATTERN = "^[A-Za-z0-9_.+%-%@ %(%)%[%] ]+$"
+local SAFE_COMPONENT_PATTERN = "^[A-Za-z0-9_.+%-%@%(%)%[%]]+$"
 
 local function normalizePath(path)
     local task = kernel.currentTask
@@ -135,6 +135,8 @@ local function normalizePath(path)
             i = len + 1
         end
 
+        comp = comp:match("^%s*(.-)%s*$")
+
         if comp == "" or comp == "." then
         elseif comp == ".." then
             if #stack > 0 then
@@ -145,6 +147,9 @@ local function normalizePath(path)
             if not comp:match(SAFE_COMPONENT_PATTERN) then
                 error("EINVAL: illegal characters in path component: " .. comp, 2)
             end
+            if comp == ".meta" then
+                error("EINVAL: reserved path component: " .. comp, 2)
+            end
             table.insert(stack, comp)
         end
     end
@@ -192,7 +197,7 @@ end
 vfs._parseMetafile = parseMetafile
 
 local function readMetaEntry(disk, parentDiskPath, filename)
-    if filename == ".meta" then error("Cannot open metafile") end
+    if filename == ".meta" then error("EACCES: Cannot open metafile") end
     local mp
     if parentDiskPath == "/" then
         mp = ".meta"