From: Kay Sievers <kay.sievers@suse.de>
Date: Thu, 24 Nov 2005 17:14:25 +0000 (+0100)
Subject: fix quoted filename lookup
X-Git-Tag: v1.4.0~1^2~25
X-Git-Url: https://git.verplant.org/?a=commitdiff_plain;h=ae78620525445407cca9830b7395668388769db6;p=git.git

fix quoted filename lookup

Signed-off-by: Kay Sievers <kay.sievers@suse.de>
---

diff --git a/gitweb.cgi b/gitweb.cgi
index cbddd3e8..e81064f1 100755
--- a/gitweb.cgi
+++ b/gitweb.cgi
@@ -1294,7 +1294,7 @@ sub git_get_hash_by_path {
 			my $t_mode = $1;
 			my $t_type = $2;
 			my $t_hash = $3;
-			my $t_name = $4;
+			my $t_name = validate_input(unquote($4));
 			if ($t_name eq $part) {
 				if (!(@parts)) {
 					return $t_hash;
@@ -1311,7 +1311,7 @@ sub git_get_hash_by_path {
 sub git_blob {
 	if (!defined $hash && defined $file_name) {
 		my $base = $hash_base || git_read_hash("$project/HEAD");
-		$hash = git_get_hash_by_path($base, $file_name, "blob");
+		$hash = git_get_hash_by_path($base, $file_name, "blob") || die_error(undef, "Error lookup file.");
 	}
 	open my $fd, "-|", "$gitbin/git-cat-file blob $hash" or die_error(undef, "Open failed.");
 	git_header_html();