From: Bodo Möller <bodo@openssl.org>
Date: Fri, 30 Mar 2001 14:55:50 +0000 (+0000)
Subject: this time *really* fix the /../ check ...
X-Git-Tag: OpenSSL_0_9_6c~182^2~306
X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff_plain;h=b10ae320f71d297476015fb1430032a6307d5dfd

this time *really* fix the /../ check ...
---

diff --git a/apps/s_server.c b/apps/s_server.c
index f8e44ce43e..4223d2db1e 100644
--- a/apps/s_server.c
+++ b/apps/s_server.c
@@ -1436,9 +1436,6 @@ static int www_body(char *hostname, int s, unsigned char *context)
 
 				switch (dot)
 					{
-				case 0:
-					dot = (e[0] == '/') ? 1 : 0;
-					break;
 				case 1:
 					dot = (e[0] == '.') ? 2 : 0;
 					break;
@@ -1449,6 +1446,8 @@ static int www_body(char *hostname, int s, unsigned char *context)
 					dot = (e[0] == '/') ? -1 : 0;
 					break;
 					}
+				if (dot == 0)
+					dot = (e[0] == '/') ? 1 : 0;
 				}
 			dot = (dot == 3) || (dot == -1); /* filename contains ".." component */