romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-04-15 03:41:41 +03:00
Code Issues Projects Releases Packages Wiki Activity

tftp: error requests for blank filenames

Browse source 
Reported-by: Joshua Rogers
Closes #19033
This commit is contained in:
Daniel Stenberg 2025-10-12 11:38:39 +02:00
parent 1feeda422e
commit e90b2aaa7e
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
lib/tftp.c
View file

@ -460,6 +460,10 @@ static CURLcode tftp_send_first(struct tftp_conn *state,
/* As RFC3617 describes the separator slash is not actually part of the
filename so we skip the always-present first letter of the path
string. */
if(!state->data->state.up.path[1]) {
failf(data, "Missing filename");
return CURLE_TFTP_ILLEGAL;
}
result = Curl_urldecode(&state->data->state.up.path[1], 0,
&filename, NULL, REJECT_ZERO);
if(result)