projects / project / cgi-io.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 98cef9d) | patch
main: fix two one-byte overreads in header_value() master
authorJo-Philipp Wich <jo@mein.io>
Wed, 10 Aug 2022 19:43:08 +0000 (21:43 +0200)
committerJo-Philipp Wich <jo@mein.io>
Wed, 10 Aug 2022 19:43:34 +0000 (21:43 +0200)
commit901b0f0463c9d16a8cf5b9ed37118d8484bc9176
treee3cb646cdeab36b79a0315a95e5369f52e35cab5tree | snapshot
parent98cef9dda63623eff07bd574ad7c98ef282af18dcommit | diff
main: fix two one-byte overreads in header_value()

By passing specially crafted header values, the skip loops in the
header_value() function may override the input buffer by one byte
each.

Reported-by: Jinwei Dong <jwdong2000@qq.com>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
main.c diff | blob | history
CGI utility for handling up/downloading of files etc.