diff options
| author | Ignacio Casal Quinteiro <qignacio@amazon.com> | 2022-01-31 12:44:37 +0100 |
|---|---|---|
| committer | Ignacio Casal Quinteiro <qignacio@amazon.com> | 2022-01-31 12:44:37 +0100 |
| commit | bdc21b67be62b8c7cd4a82c621974816966cc804 (patch) | |
| tree | 3cb18e4ac33be5396734ccb8c055a07974f46566 | |
| parent | 49004e3be3ca1200f01e161aeaa8773ed7ec1990 (diff) | |
| download | libsoup-bdc21b67be62b8c7cd4a82c621974816966cc804.tar.gz | |
server: fix crash when sending an invalid percent encoding path
Fixes #262
| -rw-r--r-- | libsoup/server/soup-server.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/libsoup/server/soup-server.c b/libsoup/server/soup-server.c index 80e67129..14b2f2f7 100644 --- a/libsoup/server/soup-server.c +++ b/libsoup/server/soup-server.c @@ -858,7 +858,8 @@ got_headers (SoupServer *server, decoded_path = g_uri_unescape_string (g_uri_get_path (uri), NULL); - if (strstr (decoded_path, "/../") || + if (decoded_path == NULL || + strstr (decoded_path, "/../") || g_str_has_suffix (decoded_path, "/..") #ifdef G_OS_WIN32 || |