From e32578847c9ff357b186172f698e45ac8e6f38b8 Mon Sep 17 00:00:00 2001
From: Bodo Möller <bodo@openssl.org>
Date: Sat, 31 Mar 2001 07:47:32 +0000
Subject: avoid buffer overflow

---
 apps/s_server.c | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'apps')

diff --git a/apps/s_server.c b/apps/s_server.c
index 97e477bde2..624dfb5e41 100644
--- a/apps/s_server.c
+++ b/apps/s_server.c
@@ -1398,9 +1398,11 @@ static int www_body(char *hostname, int s, unsigned char *context)
 				break;
 				}
 
+#if 0
 			/* append if a directory lookup */
 			if (e[-1] == '/')
 				strcat(p,"index.html");
+#endif
 
 			/* if a directory, do the index thang */
 			if (stat(p,&st_buf) < 0)
@@ -1412,7 +1414,13 @@ static int www_body(char *hostname, int s, unsigned char *context)
 				}
 			if (S_ISDIR(st_buf.st_mode))
 				{
+#if 0 /* must check buffer size */
 				strcat(p,"/index.html");
+#else
+				BIO_puts(io,text);
+				BIO_printf(io,"'%s' is a directory\r\n",p);
+				break;
+#endif
 				}
 
 			if ((file=BIO_new_file(p,"r")) == NULL)
-- 
cgit v1.2.3