Fixed overflow in substitute_index_file()

cda24d94 · Sergey Lyubka · f085e68b · cda24d94
Commit cda24d94 authored Mar 11, 2012 by Sergey Lyubka
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

mongoose.c mongoose.c +1 -1

No files found.
--- a/mongoose.c
+++ b/mongoose.c
@@ -2683,7 +2683,7 @@ static int substitute_index_file(struct mg_connection *conn, char *path,
  while ((list = next_option(list, &filename_vec, NULL)) != NULL) {

    // Ignore too long entries that may overflow path buffer
-    if (filename_vec.len > path_len - n)
+    if (filename_vec.len > path_len - (n + 2))
      continue;

    // Prepare full path to the index file