lib-http: response parser: Added check for the range of the response status value.

A value of 666 was accepted inappropriately.

diff --git a/src/lib-http/http-response-parser.c b/src/lib-http/http-response-parser.c
index 81e65acb277b06aebcb90ef3985a45573d0e6f4b..566bcd93995fcad25a8afc0f8326bbb4a34c8d18 100644 (file)
--- a/src/lib-http/http-response-parser.c
+++ b/src/lib-http/http-response-parser.c
@@ -73,6 +73,9 @@ static int http_response_parse_status(struct http_response_parser *parser)
                return -1;
        parser->response_status =
                (p[0] - '0')*100 + (p[1] - '0')*10 + (p[2] - '0');
+       if (parser->response_status < 100 ||
+               parser->response_status >= 600)
+               return -1;
        parser->parser.cur += 3;
        return 1;
 }