]> git.ipfire.org Git - thirdparty/pdns.git/commit
YaHTTP: Enforce max # of request fields and max request line size 14229/head
authorYour Name <remi.gacogne@powerdns.com>
Mon, 15 Apr 2024 13:45:38 +0000 (15:45 +0200)
committerPeter van Dijk <peter.van.dijk@powerdns.com>
Thu, 23 May 2024 13:29:22 +0000 (15:29 +0200)
commitf5d07c65a55915f98807b1976197ee633d3dd667
treea36c0477f4a1810c988ed6d918e5a6a8a4e53857
parent5901eb0a65a8a0654e4168c5883bb0d9a1c7926a
YaHTTP: Enforce max # of request fields and max request line size

The default values, 8192 bytes for the maximum request line size and
100 fields, are taken from the default settings of Apache HTTPd:
- https://httpd.apache.org/docs/2.2/mod/core.html#limitrequestline
- https://httpd.apache.org/docs/2.2/mod/core.html#limitrequestfields

Reported by OSS-Fuzz as a timeout in https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67993

(cherry picked from commit 249c86a63865e4a980511839887890c3940fc6e6)
ext/yahttp/yahttp/utility.hpp