Fixed overflow in substitute_index_file()

This commit is contained in:
Sergey Lyubka 2012-03-11 22:19:12 +00:00
parent f085e68baf
commit cda24d94fb

View File

@ -2683,7 +2683,7 @@ static int substitute_index_file(struct mg_connection *conn, char *path,
while ((list = next_option(list, &filename_vec, NULL)) != NULL) {
// Ignore too long entries that may overflow path buffer
if (filename_vec.len > path_len - n)
if (filename_vec.len > path_len - (n + 2))
continue;
// Prepare full path to the index file