wt/mongoose
1
0 Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2026-11-10 16:31:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

Protect from DoS with negative Content-Length

Browse Source
This commit is contained in:
Sergey Lyubka committed 2012-05-19 07:38:50 +01:00
1 parent 82bcf523f3
commit 4c5fee9673
2 files changed
+4 -1
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

mongoose.c
+2 -1
View File
@@ -3858,7 +3858,8 @@ static void discard_current_request_from_buffer(struct mg_connection *conn) {
buffered_len = conn->data_len - conn->request_len;
assert(buffered_len >= 0);
if (conn->content_len == -1) {
if (conn->content_len <= 0) {
// Protect from negative Content-Length, too
body_len = 0;
} else if (conn->content_len < (int64_t) buffered_len) {
body_len = (int) conn->content_len;