Klaus Demo nginx / 77c01f1
Detect runaway chunks in ngx_http_parse_chunked(). As defined in HTTP/1.1, body chunks have the following ABNF: chunk = chunk-size [ chunk-ext ] CRLF chunk-data CRLF where chunk-data is a sequence of chunk-size octets. With this change, chunk-data that doesn't end up with CRLF at chunk-size offset will be treated as invalid, such as in the example provided below: 4 SEE-THIS-AND- 4 THAT 0 Sergey Kandaurov 3 months ago
1 changed file(s) with 3 addition(s) and 0 deletion(s). Raw diff Collapse all Expand all
22672267 break;
22682268 case LF:
22692269 state = sw_chunk_start;
2270 break;
2271 default:
2272 goto invalid;
22702273 }
22712274 break;
22722275