From: Bodo Möller <bodo@openssl.org>
Date: Fri, 30 Mar 2001 14:55:19 +0000 (+0000)
Subject: this time *really* fix the /../ check ...
X-Git-Tag: OpenSSL_0_9_6a-beta3~1
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=19086ef67b7158374306e162331291dd1163ed62;p=oweals%2Fopenssl.git

this time *really* fix the /../ check ...
---

diff --git a/apps/s_server.c b/apps/s_server.c
index 2e61799fde..97e477bde2 100644
--- a/apps/s_server.c
+++ b/apps/s_server.c
@@ -1361,9 +1361,6 @@ static int www_body(char *hostname, int s, unsigned char *context)
 
 				switch (dot)
 					{
-				case 0:
-					dot = (e[0] == '/') ? 1 : 0;
-					break;
 				case 1:
 					dot = (e[0] == '.') ? 2 : 0;
 					break;
@@ -1374,6 +1371,8 @@ static int www_body(char *hostname, int s, unsigned char *context)
 					dot = (e[0] == '/') ? -1 : 0;
 					break;
 					}
+				if (dot == 0)
+					dot = (e[0] == '/') ? 1 : 0;
 				}
 			dot = (dot == 3) || (dot == -1); /* filename contains ".." component */