From 7edf6b576e7e40155d830a573966a691fd7c809c Mon Sep 17 00:00:00 2001
From: matz <matz@b2dd03c8-39d4-4d8f-98ff-823fe69b080e>
Date: Wed, 26 Jul 2006 07:09:32 +0000
Subject: * lib/cgi.rb (CGI::QueryExtension::read_multipart): check   multipart
 boundary end.  a patch from Fujioka <fuj at rabbix.jp>   [ruby-dev:28470]

git-svn-id: http://svn.ruby-lang.org/repos/ruby/trunk@10601 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
---
 lib/cgi.rb | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'lib')

diff --git a/lib/cgi.rb b/lib/cgi.rb
index 04f0b5e7c..4308efcb6 100644
--- a/lib/cgi.rb
+++ b/lib/cgi.rb
@@ -981,6 +981,7 @@ class CGI
       boundary = "--" + boundary
       buf = ""
       bufsize = 10 * 1024
+      boundary_end=""
 
       # start multipart/form-data
       stdinput.binmode if defined? stdinput.binmode
@@ -1028,6 +1029,7 @@ class CGI
           if "--" == $2
             content_length = -1
           end
+         boundary_end = $2.dup
           ""
         end
 
@@ -1062,6 +1064,7 @@ class CGI
         break if buf.size == 0
         break if content_length === -1
       end
+      raise EOFError, "bad boundary end of body part" unless boundary_end=~/--/
 
       params
     end # read_multipart
-- 
cgit