From e772234fb95ee806426fffb9e219d77d74950049 Mon Sep 17 00:00:00 2001
From: matz <matz@b2dd03c8-39d4-4d8f-98ff-823fe69b080e>
Date: Wed, 26 Jul 2006 07:28:31 +0000
Subject: * lib/cgi.rb (CGI::QueryExtension::read_multipart): check   multipart
 boundary end.  a patch from Fujioka <fuj at rabbix.jp>   [ruby-dev:28470]

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/branches/ruby_1_8@10602 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
---
 lib/cgi.rb | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'lib/cgi.rb')

diff --git a/lib/cgi.rb b/lib/cgi.rb
index 54dc07a5a3..8ea9c3def0 100644
--- a/lib/cgi.rb
+++ b/lib/cgi.rb
@@ -971,6 +971,7 @@ class CGI
       boundary = "--" + boundary
       buf = ""
       bufsize = 10 * 1024
+      boundary_end=""
 
       # start multipart/form-data
       stdinput.binmode if defined? stdinput.binmode
@@ -1031,6 +1032,7 @@ class CGI
           if "--" == $2
             content_length = -1
           end
+         boundary_end = $2.dup
           ""
         end
 
@@ -1064,6 +1066,7 @@ class CGI
         break if buf.size == 0
         break if content_length === -1
       end
+      raise EOFError, "bad boundary end of body part" unless boundary_end=~/--/
 
       params
     end # read_multipart
-- 
cgit v1.2.3