]> git.ipfire.org Git - thirdparty/openssl.git/commit
Limit the number of http headers when receiving the http response
authorAlexandr Nedvedicky <sashan@openssl.org>
Fri, 8 Mar 2024 10:21:18 +0000 (11:21 +0100)
committerTomas Mraz <tomas@openssl.org>
Tue, 12 Mar 2024 18:35:41 +0000 (19:35 +0100)
commit7f8aba2f44e9ca65b8a95987fa6c46020e1bdd6d
tree5647518eee7a0d5b854f42d78bfab5ab3535219c
parentbc930bed20d7462afecbb9d947286a335975c04a
Limit the number of http headers when receiving the http response

Change introduces a default limit on HTTP headers we expect to receive
from server to 256. If limit is exceeded http client library indicates
HTTP_R_RESPONSE_TOO_MANY_HDRLINES error. Application can use
OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines() to change default.
Setting limit to 0 implies no limit (current behavior).

Fixes #22264

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23781)
CHANGES.md
crypto/err/openssl.txt
crypto/http/http_client.c
crypto/http/http_err.c
doc/man3/OSSL_HTTP_REQ_CTX.pod
include/crypto/httperr.h
include/openssl/http.h
include/openssl/httperr.h
test/http_test.c
util/libcrypto.num