• Martin Blix Grydeland's avatar
    Mark req doclose when failing to ignore req body · 9ed39d1f
    Martin Blix Grydeland authored
    Previously we would ignore errors to iterate the request body into
    oblivion in VRB_Ignore(), keeping the connection open. This opens an
    out-of-sync vulnerability on H/1 connections.
    
    This patch tests the status of the request body in VRB_Ignore(), marking
    the request failed and that it should be closed on errors.
    9ed39d1f
cache_req_body.c 8.16 KB