]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr...
authorMateusz Malek <haproxy@sl.damisa.net>
Wed, 17 Aug 2022 12:22:09 +0000 (14:22 +0200)
committerWilly Tarreau <w@1wt.eu>
Wed, 17 Aug 2022 13:52:17 +0000 (15:52 +0200)
commit4b85a963be4bfc5aab9295ec627b332662f9e3b3
tree48a8acb179b010b097662fd4f42decac697f1723
parentb29a1dc2f4a334c1c7fea76c59abb4097422c05c
BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names

When using `option http-restrict-req-hdr-names delete`, HAproxy may
crash or delete wrong header after receiving request containing multiple
forbidden characters in single header name; exact behavior depends on
number of request headers, number of forbidden characters and position
of header containing them.

This patch fixes GitHub issue #1822.

Must be backported as far as 2.2 (buggy feature got included in 2.2.25,
2.4.18 and 2.5.8).
reg-tests/http-rules/restrict_req_hdr_names.vtc
src/http_ana.c