C9S/civetweb
2
0
Fork 0
mirror of https://github.com/civetweb/civetweb.git synced 2026-07-21 14:43:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Refactor request handling: don't allow chunked encoding and content length

Browse Source
This commit is contained in:
bel2125
2026-04-19 17:04:45 +02:00
committed by GitHub
parent 3309a6cac0
commit 588860e307
1 changed files with 11 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/civetweb.c
+11 -11
View File
@@ -19158,7 +19158,7 @@ get_message(struct mg_connection *conn, char *ebuf, size_t ebuf_len, int *err)
static int
get_request(struct mg_connection *conn, char *ebuf, size_t ebuf_len, int *err)
{
const char *cl;
const char *h_zip, *h_chunk, *h_len;
conn->connection_type =
CONNECTION_TYPE_REQUEST; /* request (valid of not) */
@@ -19193,20 +19193,23 @@ get_request(struct mg_connection *conn, char *ebuf, size_t ebuf_len, int *err)
}
#if USE_ZLIB
if (((cl = get_header(conn->request_info.http_headers,
if (((h_zip = get_header(conn->request_info.http_headers,
conn->request_info.num_headers,
"Accept-Encoding"))
!= NULL)
&& strstr(cl, "gzip")) {
&& strstr(h_zip, "gzip")) {
conn->accept_gzip = 1;
}
#endif
if (((cl = get_header(conn->request_info.http_headers,
h_chunk = get_header(conn->request_info.http_headers,
conn->request_info.num_headers,
"Transfer-Encoding"))
!= NULL)
"Transfer-Encoding");
h_len = get_header(conn->request_info.http_headers,
conn->request_info.num_headers,
"Content-Length");
if (h_chunk != NULL)
&& mg_strcasecmp(cl, "identity")) {
if (mg_strcasecmp(cl, "chunked")) {
if ((0!=mg_strcasecmp(cl, "chunked")) || (h_len!=NULL)) {
mg_snprintf(conn,
NULL, /* No truncation check for ebuf */
ebuf,
@@ -19218,10 +19221,7 @@ get_request(struct mg_connection *conn, char *ebuf, size_t ebuf_len, int *err)
}
conn->is_chunked = 1;
conn->content_len = 0; /* not yet read */
} else if ((cl = get_header(conn->request_info.http_headers,
conn->request_info.num_headers,
"Content-Length"))
!= NULL) {
} else if (h_len != NULL) {
/* Request has content length set */
char *endptr = NULL;
conn->content_len = strtoll(cl, &endptr, 10);