kore

An easy to use, scalable and secure web application framework for writing web APIs in C.
Commits | Files | Refs | README | LICENSE | git clone https://git.kore.io/kore.git

commit e580e6678ecc8683f9b6fc3bee0ca3bcbb89e9fa
parent ce874f09eaed8b0265cf62c370633ee82c676b1d
Author: Joris Vink <joris@coders.se>
Date:   Fri,  8 Jan 2016 21:19:37 +0100

Simplify checking filename component.

Diffstat:
src/http.c | 5++---
1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/src/http.c b/src/http.c @@ -812,7 +812,7 @@ int http_populate_multipart_form(struct http_request *req, int *v) { int h, i, c, l; - u_int32_t blen, slen, len; + u_int32_t blen, slen; u_int8_t *s, *end, *e, *end_headers, *data; char *d, *val, *type, *boundary, *fname; char *headers[5], *args[5], *opt[5], *name; @@ -920,8 +920,7 @@ http_populate_multipart_form(struct http_request *req, int *v) for (d = opt[2]; isspace(*d); d++) ; - len = MIN(strlen("filename="), strlen(d)); - if (!strncasecmp(d, "filename=", len)) { + if (!strncasecmp(d, "filename=", 9)) { if ((val = strchr(d, '=')) == NULL) { kore_mem_free(name); continue;