]> git.ipfire.org Git - thirdparty/pdns.git/commit
YaHTTP: Enforce max # of request fields and max request line size 14223/head
authorYour Name <remi.gacogne@powerdns.com>
Mon, 15 Apr 2024 13:45:38 +0000 (15:45 +0200)
committerOtto Moerbeek <otto.moerbeek@open-xchange.com>
Thu, 23 May 2024 07:15:12 +0000 (09:15 +0200)
commit1328028ec5643b30d446244b44caf4ce373c2046
tree05f45b28135c6e6ad704576dca3a35a6fe15a5e5
parentc16c2bd9f6395a6ac915b60d1b7887a9a911a42f
YaHTTP: Enforce max # of request fields and max request line size

The default values, 8192 bytes for the maximum request line size and
100 fields, are taken from the default settings of Apache HTTPd:
- https://httpd.apache.org/docs/2.2/mod/core.html#limitrequestline
- https://httpd.apache.org/docs/2.2/mod/core.html#limitrequestfields

Reported by OSS-Fuzz as a timeout in https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67993

(cherry picked from commit 249c86a63865e4a980511839887890c3940fc6e6)
ext/yahttp/yahttp/utility.hpp