Commit b10ae320 authored by Bodo Möller's avatar Bodo Möller
Browse files

this time *really* fix the /../ check ...

parent 5d3ab9b0

apps/s_server.c

+2 −3
Original line number Diff line number Diff line
@@ -1436,9 +1436,6 @@ static int www_body(char *hostname, int s, unsigned char *context) 


				switch (dot)

					{

				case 0:

					dot = (e[0] == '/') ? 1 : 0;

					break;

				case 1:

					dot = (e[0] == '.') ? 2 : 0;

					break;
@@ -1449,6 +1446,8 @@ static int www_body(char *hostname, int s, unsigned char *context) 
					dot = (e[0] == '/') ? -1 : 0;

					break;

					}

				if (dot == 0)

					dot = (e[0] == '/') ? 1 : 0;

				}

			dot = (dot == 3) || (dot == -1); /* filename contains ".." component */