From b10ae320f71d297476015fb1430032a6307d5dfd Mon Sep 17 00:00:00 2001 From: =?utf8?q?Bodo=20M=C3=B6ller?= Date: Fri, 30 Mar 2001 14:55:50 +0000 Subject: [PATCH] this time *really* fix the /../ check ... --- apps/s_server.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/apps/s_server.c b/apps/s_server.c index f8e44ce43e..4223d2db1e 100644 --- a/apps/s_server.c +++ b/apps/s_server.c @@ -1436,9 +1436,6 @@ static int www_body(char *hostname, int s, unsigned char *context) switch (dot) { - case 0: - dot = (e[0] == '/') ? 1 : 0; - break; case 1: dot = (e[0] == '.') ? 2 : 0; break; @@ -1449,6 +1446,8 @@ static int www_body(char *hostname, int s, unsigned char *context) dot = (e[0] == '/') ? -1 : 0; break; } + if (dot == 0) + dot = (e[0] == '/') ? 1 : 0; } dot = (dot == 3) || (dot == -1); /* filename contains ".." component */ -- 2.25.1