From 998f0247816a50628ad297e6c17b9a375fb541ce Mon Sep 17 00:00:00 2001 From: Stefan Ritt Date: Fri, 15 Apr 2011 06:49:31 +0000 Subject: [PATCH] Added check for content-length to be non-negative SVN revision: 2413 --- src/elogd.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/elogd.c b/src/elogd.c index 284ec06b..98a69559 100755 --- a/src/elogd.c +++ b/src/elogd.c @@ -28832,6 +28832,12 @@ void server_loop(void) else if (strstr(net_buffer, "Content-length:")) content_length = atoi(strstr(net_buffer, "Content-length:") + 15); + /* check for valid content-length */ + if (content_length < 0) { + broken = TRUE; + break; + } + /* extract header length */ if (strstr(net_buffer, "\r\n\r\n")) header_length = strstr(net_buffer, "\r\n\r\n") - net_buffer + 4;