diff options
| author |   reyk <reyk@openbsd.org> | 2017-02-07 12:22:41 +0000 |
|---|---|---|
| committer | reyk <reyk@openbsd.org> | 2017-02-07 12:22:41 +0000 |
| commit | 619eca925b2d0ff27f9bf4e3b3ac19bd89a172ed (patch) | |
| tree | bf9a60fbbf27603dbe5d3b94a1e577f16b0d5ff7 /sys/netinet/ip_ipcomp.c | |
| parent | Fix Xr: syspatch(1) -> syspatch(8) (diff) | |
| download | wireguard-openbsd-619eca925b2d0ff27f9bf4e3b3ac19bd89a172ed.tar.xz wireguard-openbsd-619eca925b2d0ff27f9bf4e3b3ac19bd89a172ed.zip | |
Improve parsing of the HTTP request line
Make sure that the beginning of a new request starts with an
alphabetic character. This is a quick way to detect non-ASCII
requests (eg. TLS on port 80). The full validation of the request
method is done once the input line is read.
Make sure that non-terminated lines do not exceed the
SERVER_MAXHEADERLENGTH which is 8k. As the current read watermark is
set to 64k, this means that the limit check is triggered after max.
64k of input, depending on the TCP read buffer.
OK benno@ jsing@
Diffstat (limited to 'sys/netinet/ip_ipcomp.c')
0 files changed, 0 insertions, 0 deletions