From e2b404ab58259bb538e2d785d6ebbe9e9263bbef Mon Sep 17 00:00:00 2001 From: Fredrik Tolf Date: Sat, 30 Apr 2011 08:53:14 +0200 Subject: [PATCH] htparser: Implemented resource limits for response headers as well. --- src/htparser.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/htparser.c b/src/htparser.c index 1ed9175..ba76d01 100644 --- a/src/htparser.c +++ b/src/htparser.c @@ -146,6 +146,8 @@ static struct hthead *parseresp(FILE *in) goto fail; } else { bufadd(ver, c); + if(ver.d >= 128) + goto fail; } } while(1) { @@ -156,6 +158,8 @@ static struct hthead *parseresp(FILE *in) goto fail; } else { code = (code * 10) + (c - '0'); + if(code >= 10000) + goto fail; } } while(1) { @@ -167,6 +171,8 @@ static struct hthead *parseresp(FILE *in) goto fail; } else { bufadd(msg, c); + if(msg.d >= 512) + goto fail; } } bufadd(msg, 0); -- 2.11.0