Check invalid query values

go-gitea · Jan 6, 2017 · 1fe0d48 · 1fe0d48
1 parent 791d3e4
commit 1fe0d48
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/routers/repo/view.go b/routers/repo/view.go
@@ -49,6 +49,12 @@ func renderDirectory(ctx *context.Context, treeLink string) {
 
 	start := ctx.QueryInt("start")
 	count := ctx.QueryInt("count")
+
+	// Check invalid values
+	if start < 0 || count < 0 || start+count > len(entries) {
+		start = 0
+		count = len(entries)
+	}
 	entries = entries[start : start+count]
 
 	ctx.Data["Files"], err = entries.GetCommitsInfo(ctx.Repo.Commit, ctx.Repo.TreePath)