generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

this time *really* fix the /../ check ...

Browse Source
This commit is contained in:
Bodo Möller
2001-03-30 14:55:19 +00:00
parent ce3fc3956d
commit 19086ef67b
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
apps/s_server.c
View File

@@ -1361,9 +1361,6 @@ static int www_body(char *hostname, int s, unsigned char *context)
switch (dot)
{
case 0:
dot = (e[0] == '/') ? 1 : 0;
break;
case 1:
dot = (e[0] == '.') ? 2 : 0;
break;
@@ -1374,6 +1371,8 @@ static int www_body(char *hostname, int s, unsigned char *context)
dot = (e[0] == '/') ? -1 : 0;
break;
}
if (dot == 0)
dot = (e[0] == '/') ? 1 : 0;
}
dot = (dot == 3) || (dot == -1); /* filename contains ".." component */