From 19086ef67b7158374306e162331291dd1163ed62 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Bodo=20M=C3=B6ller?= Date: Fri, 30 Mar 2001 14:55:19 +0000 Subject: [PATCH] this time *really* fix the /../ check ... --- apps/s_server.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/apps/s_server.c b/apps/s_server.c index 2e61799fde..97e477bde2 100644 --- a/apps/s_server.c +++ b/apps/s_server.c @@ -1361,9 +1361,6 @@ static int www_body(char *hostname, int s, unsigned char *context) switch (dot) { - case 0: - dot = (e[0] == '/') ? 1 : 0; - break; case 1: dot = (e[0] == '.') ? 2 : 0; break; @@ -1374,6 +1371,8 @@ static int www_body(char *hostname, int s, unsigned char *context) dot = (e[0] == '/') ? -1 : 0; break; } + if (dot == 0) + dot = (e[0] == '/') ? 1 : 0; } dot = (dot == 3) || (dot == -1); /* filename contains ".." component */ -- 2.25.1