• Martin Blix Grydeland's avatar
    Mark req doclose when failing to ignore req body · fceaefd4
    Martin Blix Grydeland authored
    Previously we would ignore errors to iterate the request body into
    oblivion in VRB_Ignore(), keeping the connection open. This opens an
    out-of-sync vulnerability on H/1 connections.
    
    This patch tests the status of the request body in VRB_Ignore(), marking
    the request failed and that it should be closed on errors.
    fceaefd4
cache_req_body.c 8.26 KB