wt/mongoose
1
0
Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2026-10-13 10:15:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge commit from fork

Browse Source 
avoid OOB reads in path_is_sane
This commit is contained in:
Sergio R. Caprile
2026-06-23 13:05:25 -03:00
committed by GitHub
parent 044fdd472f b55de8b151
commit 60bfa45656
3 changed files with 31 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/unit_test.c
+13 -1
View File
@@ -2554,7 +2554,18 @@ static void test_str(void) {
ASSERT(strcmp(buf, "[164:2100:0:0:0:0:0:0]:3 7") == 0);
}
ASSERT(mg_path_is_sane(mg_str(".")) == true);
{
char s[1] = ".";
ASSERT(mg_path_is_sane(mg_str_n(s, 1)) == true);
}
{
char s[2] = "/.";
ASSERT(mg_path_is_sane(mg_str_n(s, 2)) == true);
}
{
char s[3] = "a/.";
ASSERT(mg_path_is_sane(mg_str_n(s, 3)) == true);
}
ASSERT(mg_path_is_sane(mg_str("")) == true);
ASSERT(mg_path_is_sane(mg_str("a.b")) == true);
ASSERT(mg_path_is_sane(mg_str("a..b")) == true);
@@ -2570,6 +2581,7 @@ static void test_str(void) {
ASSERT(mg_path_is_sane(mg_str("a/../b")) == false);
ASSERT(mg_path_is_sane(mg_str_n("a/..", 2)) == true);
ASSERT(mg_path_is_sane(mg_str_n("a/../b", 2)) == true);
ASSERT(mg_path_is_sane(mg_str_n("a\0/../b", 7)) == false);
}
static void fn1(struct mg_connection *c, int ev, void *ev_data) {