Browse Source

fix cgi-bin directory handling (#1764)

SVN-Revision: 7688
Felix Fietkau 18 years ago
parent
commit
0becec394f
1 changed files with 15 additions and 0 deletions
  1. 15 0
      package/busybox/patches/460-httpd_cgi_bin.patch

+ 15 - 0
package/busybox/patches/460-httpd_cgi_bin.patch

@@ -0,0 +1,15 @@
+Index: busybox-1.4.2/networking/httpd.c
+===================================================================
+--- busybox-1.4.2.orig/networking/httpd.c	2007-06-21 18:12:06.791080496 +0200
++++ busybox-1.4.2/networking/httpd.c	2007-06-21 18:14:48.914434000 +0200
+@@ -1715,8 +1715,8 @@
+ 		test = url + 1;      /* skip first '/' */
+ 
+ #if ENABLE_FEATURE_HTTPD_CGI
+-		if (strncmp(test, "cgi-bin", 7) == 0) {
+-			if (test[7] == '/' && test[8] == 0)
++		if (strncmp(test, "cgi-bin/", 8) == 0) {
++			if (test[8] == 0)
+ 				goto FORBIDDEN;     /* protect listing cgi-bin/ */
+ 			sendCgi(url, prequest, length, cookie, content_type);
+ 			break;