From 0640e1fe50bd5000c3c9c58b0db1009689f751f7 Mon Sep 17 00:00:00 2001 From: Ingo Schwarze Date: Fri, 25 Jul 2014 19:37:34 +0000 Subject: oops, we must not try to validate a manpath we don't have; fixing an oversight introduced in rev. 1.77 --- cgi.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'cgi.c') diff --git a/cgi.c b/cgi.c index 04a02d63..36e069fc 100644 --- a/cgi.c +++ b/cgi.c @@ -1,4 +1,4 @@ -/* $Id: cgi.c,v 1.88 2014/07/25 18:20:39 schwarze Exp $ */ +/* $Id: cgi.c,v 1.89 2014/07/25 19:37:34 schwarze Exp $ */ /* * Copyright (c) 2011, 2012 Kristaps Dzonsons * Copyright (c) 2014 Ingo Schwarze @@ -1086,7 +1086,8 @@ main(void) if (NULL != (querystring = getenv("QUERY_STRING"))) http_parse(&req, querystring); - if ( ! validate_manpath(&req, req.q.manpath)) { + if ( ! (NULL == req.q.manpath || + validate_manpath(&req, req.q.manpath))) { pg_error_badrequest( "You specified an invalid manpath."); return(EXIT_FAILURE); -- cgit v1.2.3-56-ge451