You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
19 lines
485 B
19 lines
485 B
6 years ago
|
@@ -, +, @@
|
||
|
|
(CVE-2017-13089)
|
||
|
|
---
|
||
|
|
src/http.c | 3 +++
|
||
|
|
1 file changed, 3 insertions(+)
|
||
|
|
--- a/src/http.c
|
||
|
|
+++ a/src/http.c
|
||
|
|
@@ -973,6 +973,9 @@ skip_short_body (int fd, wgint contlen, bool chunked)
|
||
|
|
remaining_chunk_size = strtol (line, &endl, 16);
|
||
|
|
xfree (line);
|
||
|
|
|
||
|
|
+ if (remaining_chunk_size < 0)
|
||
|
|
+ return false;
|
||
|
|
+
|
||
|
|
if (remaining_chunk_size == 0)
|
||
|
|
{
|
||
|
|
line = fd_read_line (fd);
|
||
|
|
--
|