]> granicus.if.org Git - curl/commitdiff
AddFormData: prevent only directories from being posted
authorDaniel Stenberg <daniel@haxx.se>
Mon, 4 Mar 2013 14:20:22 +0000 (15:20 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Mon, 4 Mar 2013 14:52:10 +0000 (15:52 +0100)
Commit f4cc54cb4746ae5a6d (shipped as part of the 7.29.0 release) was a
bug fix that introduced a regression in that while trying to avoid
allowing directory names, it also forbade "special" files like character
devices and more. like "/dev/null" as was used by Oliver who reported
this regression.

Reported by: Oliver Gondža
Bug: http://curl.haxx.se/mail/archive-2013-02/0040.html

lib/formdata.c

index 308b33a859215beb5b4e0e836bdd4cff050f187e..49c5d2943b8ce887ce75876c3041939eec1439d1 100644 (file)
@@ -831,7 +831,7 @@ static CURLcode AddFormData(struct FormData **formp,
          file */
       if(!strequal("-", newform->line)) {
         struct_stat file;
-        if(!stat(newform->line, &file) && S_ISREG(file.st_mode))
+        if(!stat(newform->line, &file) && !S_ISDIR(file.st_mode))
           *size += file.st_size;
         else
           return CURLE_BAD_FUNCTION_ARGUMENT;