From 7939fe44b8abedb4d8bb5090aec7a92eb1aa7a4b Mon Sep 17 00:00:00 2001 From: Matthias Lederhofer Date: Sun, 17 Sep 2006 00:30:27 +0200 Subject: [PATCH] gitweb: do not use 'No such directory' error message undef $project; to prevent a file named description to be read. Signed-off-by: Junio C Hamano --- gitweb/gitweb.perl | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/gitweb/gitweb.perl b/gitweb/gitweb.perl index 250138520f..fa657578fb 100755 --- a/gitweb/gitweb.perl +++ b/gitweb/gitweb.perl @@ -198,13 +198,10 @@ if (defined $action) { our $project = $cgi->param('p'); if (defined $project) { - if (!validate_input($project)) { - die_error(undef, "Invalid project parameter"); - } - if (!(-d "$projectroot/$project")) { - die_error(undef, "No such directory"); - } - if (!(-e "$projectroot/$project/HEAD")) { + if (!validate_input($project) || + !(-d "$projectroot/$project") || + !(-e "$projectroot/$project/HEAD")) { + undef $project; die_error(undef, "No such project"); } }