Return an error message for selectors containing two dots - geomyidae - A small C-based gopherd. (HTM) git clone git://bitreich.org/geomyidae/ git://enlrupgkhuxnvlhsf6lc3fziv5h2hhfrinws65d7roiv6bfj7d652fid.onion/geomyidae/ (DIR) Log (DIR) Files (DIR) Refs (DIR) Tags (DIR) README (DIR) LICENSE --- (DIR) commit ce4493bfe5e03be7d7366962600933b1178ebbfd (DIR) parent 023fde401dd25419b07b1be7675f5b8c27f2fa80 (HTM) Author: Christian Kellermann <ckeen@pestilenz.org> Date: Thu, 22 Mar 2018 13:08:39 +0100 Return an error message for selectors containing two dots Signed-off-by: Christoph Lohmann <20h@r-36.net> Diffstat: M main.c | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) --- (DIR) diff --git a/main.c b/main.c @@ -62,6 +62,9 @@ char *htredir = "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n" " This page is for redirecting you to: <a href=\"%s\">%s</a>.\n" " </body>\n" "</html>\n"; +char *selinval ="3Happy helping ☃ here: " + "Sorry, your selector contains '..'. That's illegal here.\tErr" + "\tlocalhost\t70\r\n.\r\n\r\n"; int dropprivileges(struct group *gr, struct passwd *pw) @@ -174,8 +177,11 @@ handlerequest(int sock, char *base, char *ohost, char *port, char *clienth, recvb[0] = '/'; recvb[1] = '\0'; } - if (recvb[0] != '/' || strstr(recvb, "..")) + + if (recvb[0] != '/' || strstr(recvb, "..")){ + dprintf(sock, selinval); return; + } snprintf(path, sizeof(path), "%s%s", base, recvb);