Handle unknown timezone identifiers in FsTzdbProvider

Author: Manishearth

src/tzdb.rs

@@ -189,12 +189,19 @@ impl Tzif {
 
     #[cfg(target_family = "unix")]
     pub fn read_tzif(identifier: &str) -> TemporalResult<Self> {
+        // Protect from path traversal attacks
+        if (identifier.starts_with('/') || identifier.contains('.')) {
+            return Err(TemporalError::range("Ill-formed timezone identifier"));
+        }
         let mut path = PathBuf::from(ZONEINFO_DIR);
         path.push(identifier);
         Self::from_path(&path)
     }
 
     pub fn from_path(path: &Path) -> TemporalResult<Self> {
+        if !path.exists() {
+            return Err(TemporalError::range("Unknown timezone identifier"));
+        }
         tzif::parse_tzif_file(path)
             .map(Into::into)
             .map_err(|e| TemporalError::general(e.to_string()))