RepoMirrors/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git/ synced 2025-02-10 07:27:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

BUG/MEDIUM: h1: Reject empty Transfer-encoding header

Browse Source 
The Transfer-Encoding headers list the transfer coding that have been
applied to the content in order to form the message body. It is a list of
tokens. And as specified by RFC 9110, a token cannot be empty. When several
coding names are specify as a comma-separated value, this case is properly
handled and an error is triggered. However, an empty header value will just
be skipped and no error is triggered. This could be an issue with some buggy
servers.

Now, empty Transfer-Encoding header are rejected too.

This patch must be backported as far as 2.6.
This commit is contained in:
Christopher Faulet 2024-07-09 07:55:58 +02:00
parent 428451fe96
commit 4a2dd6f377
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/h1.c
View File

@ -129,6 +129,10 @@ int h1_parse_xfer_enc_header(struct h1m *h1m, struct ist value)
char *e, *n;
struct ist word;
/* Reject empty header */
if (istptr(value) == istend(value))
goto fail;
h1m->flags |= H1_MF_XFER_ENC;
word.ptr = value.ptr - 1; // -1 for next loop's pre-increment