X-Git-Url: http://www.dolda2000.com/gitweb/?p=ashd.git;a=blobdiff_plain;f=src%2Fhtparser.c;h=ba76d01be0fc4e38b5ae7bd4af41e91816e5e961;hp=ceae319aeafbd12ef68cd0342c9e4be6e2747c38;hb=e2b404ab58259bb538e2d785d6ebbe9e9263bbef;hpb=d341283f757e188a52aedae7d715e201f2a430c2

diff --git a/src/htparser.c b/src/htparser.c
index ceae319..ba76d01 100644
--- a/src/htparser.c
+++ b/src/htparser.c
@@ -77,6 +77,8 @@ static struct hthead *parsereq(FILE *in)
 	    goto fail;
 	} else {
 	    bufadd(method, c);
+	    if(method.d >= 128)
+		goto fail;
 	}
     }
     while(1) {
@@ -87,6 +89,8 @@ static struct hthead *parsereq(FILE *in)
 	    goto fail;
 	} else {
 	    bufadd(url, c);
+	    if(url.d >= 65536)
+		goto fail;
 	}
     }
     while(1) {
@@ -98,6 +102,8 @@ static struct hthead *parsereq(FILE *in)
 	    goto fail;
 	} else {
 	    bufadd(ver, c);
+	    if(ver.d >= 128)
+		goto fail;
 	}
     }
     bufadd(method, 0);
@@ -140,6 +146,8 @@ static struct hthead *parseresp(FILE *in)
 	    goto fail;
 	} else {
 	    bufadd(ver, c);
+	    if(ver.d >= 128)
+		goto fail;
 	}
     }
     while(1) {
@@ -150,6 +158,8 @@ static struct hthead *parseresp(FILE *in)
 	    goto fail;
 	} else {
 	    code = (code * 10) + (c - '0');
+	    if(code >= 10000)
+		goto fail;
 	}
     }
     while(1) {
@@ -161,6 +171,8 @@ static struct hthead *parseresp(FILE *in)
 	    goto fail;
 	} else {
 	    bufadd(msg, c);
+	    if(msg.d >= 512)
+		goto fail;
 	}
     }
     bufadd(msg, 0);
@@ -499,7 +511,7 @@ int main(int argc, char **argv)
     if(usesyslog)
 	opensyslog();
     if(root) {
-	if(chroot(root)) {
+	if(chdir(root) || chroot(root)) {
 	    flog(LOG_ERR, "could not chroot to %s: %s", root, strerror(errno));
 	    exit(1);
 	}