You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
After the security fix in PR #14 incomplete query parameters (e.g. /test?foo=bar& or just /test?) lead to a lockup of the HTTP request parser: in HTTPsReq_Handle the value of RxBufLenRem stays at 1 with just the trailing CR (and LF) at RxBufPtr.
Before the patches RxBufLenRem was 0 at this point.
I'd suggest to add the following line len_rd += len
here (between lines 1191 and 1193):
After the security fix in PR #14 incomplete query parameters (e.g.
/test?foo=bar&
or just/test?
) lead to a lockup of the HTTP request parser: inHTTPsReq_Handle
the value ofRxBufLenRem
stays at1
with just the trailing CR (and LF) atRxBufPtr
.Before the patches
RxBufLenRem
was0
at this point.I'd suggest to add the following line
len_rd += len
here (between lines 1191 and 1193):
uC-HTTP/Server/Source/http-s_req.c
Lines 1191 to 1194 in 80d4004
The text was updated successfully, but these errors were encountered: