From: Bodo Möller <bodo@openssl.org>
Date: Sat, 31 Mar 2001 07:47:32 +0000 (+0000)
Subject: avoid buffer overflow
X-Git-Tag: OpenSSL_0_9_6a~16
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=e32578847c9ff357b186172f698e45ac8e6f38b8;p=oweals%2Fopenssl.git

avoid buffer overflow
---

diff --git a/apps/s_server.c b/apps/s_server.c
index 97e477bde2..624dfb5e41 100644
--- a/apps/s_server.c
+++ b/apps/s_server.c
@@ -1398,9 +1398,11 @@ static int www_body(char *hostname, int s, unsigned char *context)
 				break;
 				}
 
+#if 0
 			/* append if a directory lookup */
 			if (e[-1] == '/')
 				strcat(p,"index.html");
+#endif
 
 			/* if a directory, do the index thang */
 			if (stat(p,&st_buf) < 0)
@@ -1412,7 +1414,13 @@ static int www_body(char *hostname, int s, unsigned char *context)
 				}
 			if (S_ISDIR(st_buf.st_mode))
 				{
+#if 0 /* must check buffer size */
 				strcat(p,"/index.html");
+#else
+				BIO_puts(io,text);
+				BIO_printf(io,"'%s' is a directory\r\n",p);
+				break;
+#endif
 				}
 
 			if ((file=BIO_new_file(p,"r")) == NULL)