summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authornbd <nbd@3c298f89-4303-0410-b956-a3cf2f4a3e73>2007-06-21 16:17:59 +0000
committernbd <nbd@3c298f89-4303-0410-b956-a3cf2f4a3e73>2007-06-21 16:17:59 +0000
commit3ad62b46757d4f2e2b34044fd8cf5191504d130c (patch)
tree092f13aeffbe89d03cf20e0f3048d620e6360631
parent5ae21af497fe409f07f127dc92328e511d373de7 (diff)
fix cgi-bin directory handling (#1764)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@7688 3c298f89-4303-0410-b956-a3cf2f4a3e73
-rw-r--r--package/busybox/patches/460-httpd_cgi_bin.patch15
1 files changed, 15 insertions, 0 deletions
diff --git a/package/busybox/patches/460-httpd_cgi_bin.patch b/package/busybox/patches/460-httpd_cgi_bin.patch
new file mode 100644
index 000000000..d21c51834
--- /dev/null
+++ b/package/busybox/patches/460-httpd_cgi_bin.patch
@@ -0,0 +1,15 @@
+Index: busybox-1.4.2/networking/httpd.c
+===================================================================
+--- busybox-1.4.2.orig/networking/httpd.c 2007-06-21 18:12:06.791080496 +0200
++++ busybox-1.4.2/networking/httpd.c 2007-06-21 18:14:48.914434000 +0200
+@@ -1715,8 +1715,8 @@
+ test = url + 1; /* skip first '/' */
+
+ #if ENABLE_FEATURE_HTTPD_CGI
+- if (strncmp(test, "cgi-bin", 7) == 0) {
+- if (test[7] == '/' && test[8] == 0)
++ if (strncmp(test, "cgi-bin/", 8) == 0) {
++ if (test[8] == 0)
+ goto FORBIDDEN; /* protect listing cgi-bin/ */
+ sendCgi(url, prequest, length, cookie, content_type);
+ break;