]> git.ipfire.org Git - thirdparty/pdns.git/commit
YaHTTP: Enforce max # of request fields and max request line size 14197/head
authorYour Name <remi.gacogne@powerdns.com>
Mon, 15 Apr 2024 13:45:38 +0000 (15:45 +0200)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Fri, 17 May 2024 12:48:02 +0000 (14:48 +0200)
commit249c86a63865e4a980511839887890c3940fc6e6
treea5c7e1c557404a1ecdb569f1f9347595bb00e0db
parent6fe0cdfd49d04c89ed2521d7b8a0cbc71d4bb5c0
YaHTTP: Enforce max # of request fields and max request line size

The default values, 8192 bytes for the maximum request line size and
100 fields, are taken from the default settings of Apache HTTPd:
- https://httpd.apache.org/docs/2.2/mod/core.html#limitrequestline
- https://httpd.apache.org/docs/2.2/mod/core.html#limitrequestfields

Reported by OSS-Fuzz as a timeout in https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67993
ext/yahttp/yahttp/utility.hpp