Ver Fonte

Fixed overflow in substitute_index_file()

Sergey Lyubka há 13 anos atrás
pai
commit
cda24d94fb
1 ficheiros alterados com 1 adições e 1 exclusões
  1. 1 1
      mongoose.c

+ 1 - 1
mongoose.c

@@ -2683,7 +2683,7 @@ static int substitute_index_file(struct mg_connection *conn, char *path,
   while ((list = next_option(list, &filename_vec, NULL)) != NULL) {
 
     // Ignore too long entries that may overflow path buffer
-    if (filename_vec.len > path_len - n)
+    if (filename_vec.len > path_len - (n + 2))
       continue;
 
     // Prepare full path to the index file