Imposed some limits on request parts.

[ashd.git] / lib / req.c

diff --git a/lib/req.c b/lib/req.c
index a3e7273..da8e3f0 100644 (file)
--- a/lib/req.c
+++ b/lib/req.c
@@ -106,12 +106,16 @@ int parseheaders(struct hthead *head, FILE *in)
 {
     int c, state;
     struct charbuf name, val;
 {
     int c, state;
     struct charbuf name, val;

+    size_t tsz;

     
     bufinit(name);
     bufinit(val);
     state = 0;
     
     bufinit(name);
     bufinit(val);
     state = 0;

+    tsz = 0;

     while(1) {
        c = fgetc(in);
     while(1) {
        c = fgetc(in);

+       if(++tsz >= 65536)
+           goto fail;

     again:
        if(state == 0) {
            if(c == '\r') {
     again:
        if(state == 0) {
            if(c == '\r') {