romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-22 21:07:18 +03:00
Code Issues Projects Releases Packages Wiki Activity

http2: check push header names by length first

Browse source 
Reported-by: Joshua Rogers
Closes #18930
This commit is contained in:
Stefan Eissing 2025-10-08 12:22:22 +02:00 • committed by Daniel Stenberg
parent dae19dd94a
commit 93e91e965e
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/http2.c
View file

@ -1590,7 +1590,8 @@ static int on_header(nghttp2_session *session, const nghttp2_frame *frame,
if(frame->hd.type == NGHTTP2_PUSH_PROMISE) {
char *h;
if(!strcmp(HTTP_PSEUDO_AUTHORITY, (const char *)name)) {
if((namelen == (sizeof(HTTP_PSEUDO_AUTHORITY)-1)) &&
!strncmp(HTTP_PSEUDO_AUTHORITY, (const char *)name, namelen)) {
/* pseudo headers are lower case */
int rc = 0;
char *check = curl_maprintf("%s:%d", cf->conn->host.name,