ExternalVendorCode/serval-dna
1
0
Fork 0
mirror of https://github.com/servalproject/serval-dna.git synced 2024-12-18 20:57:56 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Check query parameter format before opening meshmb state

Browse Source
This commit is contained in:
Jeremy Lakeman 2017-10-10 14:26:15 +10:30
parent 159c731e9e
commit 38eee5ee2e
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
meshmb_restful.c
View File

@ -496,18 +496,19 @@ static int restful_meshmb_follow_ignore(httpd_request *r, const char *remainder)
return 404;
assert(r->finalise_union == NULL);
const char *name = http_request_get_query_param(&r->http, "name");
const char *sender_hex = http_request_get_query_param(&r->http, "sender");
sid_t sender;
bzero(&sender, sizeof sender);
if (sender_hex && *sender_hex){
if (str_to_sid_t(&sender, sender_hex) == -1)
return 400;
}
struct meshmb_session *session = open_session(&r->bid);
int ret=-1;
if (session){
const char *name = http_request_get_query_param(&r->http, "name");
const char *sender_hex = http_request_get_query_param(&r->http, "sender");
sid_t sender;
bzero(&sender, sizeof sender);
if (sender_hex && *sender_hex){
if (str_to_sid_t(&sender, sender_hex) == -1)
goto fail;
}
switch(r->ui64){
case FLAG_FOLLOW:
@ -527,7 +528,6 @@ static int restful_meshmb_follow_ignore(httpd_request *r, const char *remainder)
}
}
fail:
if (ret!=-1
&& meshmb_flush(session->feeds)!=-1){
http_request_simple_response(&r->http, 201, "TODO, detailed response");