• Martin Blix Grydeland's avatar
    Mark req doclose when failing to ignore req body · dcbe8b9e
    Martin Blix Grydeland authored
    Previously we would ignore errors to iterate the request body into
    oblivion in VRB_Ignore(), keeping the connection open. This opens an
    out-of-sync vulnerability on H/1 connections.
    
    This patch tests the status of the request body in VRB_Ignore(), marking
    the request failed and that it should be closed on errors.
    dcbe8b9e
Name
Last commit
Last update
..
varnishadm Loading commit data...
varnishd Loading commit data...
varnishhist Loading commit data...
varnishlog Loading commit data...
varnishncsa Loading commit data...
varnishstat Loading commit data...
varnishtest Loading commit data...
varnishtop Loading commit data...
Makefile.am Loading commit data...
flint.lnt Loading commit data...