]> git.ipfire.org Git - thirdparty/pdns.git/commit
YaHTTP: Enforce max # of request fields and max request line size 14333/head
authorYour Name <remi.gacogne@powerdns.com>
Mon, 15 Apr 2024 13:45:38 +0000 (15:45 +0200)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Mon, 17 Jun 2024 09:04:44 +0000 (11:04 +0200)
commited8a6c94f08802e6520c29aad06330704572759a
treeffb4fab6ef0890b5c93171c2bfac6f686d8db5cc
parent14a3de88f7a235812d65a43d5756dd59820c6b6e
YaHTTP: Enforce max # of request fields and max request line size

The default values, 8192 bytes for the maximum request line size and
100 fields, are taken from the default settings of Apache HTTPd:
- https://httpd.apache.org/docs/2.2/mod/core.html#limitrequestline
- https://httpd.apache.org/docs/2.2/mod/core.html#limitrequestfields

Reported by OSS-Fuzz as a timeout in https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67993

(cherry picked from commit 249c86a63865e4a980511839887890c3940fc6e6)
ext/yahttp/yahttp/utility.hpp