Changeset 300 for server

Timestamp:

Apr 23, 2007, 4:19:41 AM (17 years ago)

Author:

andersk

Message:

Fix expected_len check.

File:

• server/common/patches/httpd-suexec-scripts.patch (modified) (1 diff)

server/common/patches/httpd-suexec-scripts.patch

@@ -151 +151 @@
 +    char *expected = malloc(expected_len);
 +    snprintf(expected, expected_len, "%s/%s", target_homedir, AP_USERDIR_SUFFIX);
-+    if (strncmp(cwd, expected, expected_len) != 0) {
++    if (strncmp(cwd, expected, expected_len-1) != 0) {
 +        log_err("error: file's directory not a subdirectory of user's home directory (%s, %s)\n", cwd, expected);
 +        exit(114);