-
Martin Blix Grydeland authoredPreviously we would ignore errors to iterate the request body into oblivion in VRB_Ignore(), keeping the connection open. This opens an out-of-sync vulnerability on H/1 connections. This patch tests the status of the request body in VRB_Ignore(), marking the request failed and that it should be closed on errors.
dcbe8b9e
| Name |
Last commit
|
Last update |
|---|---|---|
| .. | ||
| cache | ||
| common | ||
| fuzzers | ||
| hash | ||
| hpack | ||
| http1 | ||
| http2 | ||
| mgt | ||
| proxy | ||
| storage | ||
| waiter | ||
| Makefile.am | ||
| VSC_lck.vsc | ||
| VSC_main.vsc | ||
| VSC_mempool.vsc | ||
| VSC_mgt.vsc | ||
| VSC_sma.vsc | ||
| VSC_smf.vsc | ||
| VSC_smu.vsc | ||
| VSC_vbe.vsc | ||
| builtin.vcl | ||
| flint.lnt | ||
| flint.sh | ||
| vclflint.lnt | ||
| vclflint.sh |