[BUG] check_post: limit analysis to the buffer length

If "balance url_param XXX check_post" is used, we must bound the
number of bytes analysed to the buffer's length.

diff --git a/src/backend.c b/src/backend.c
index f4e6110f977c858b3a57ac77399aa9b7780b1d5f..70201ce2c95710ab2f5e720dfd57a69c455639a4 100644 (file)
--- a/src/backend.c
+++ b/src/backend.c
@@ -289,6 +289,9 @@ struct server *get_server_ph_post(struct session *s)
                len = chunk;
        }
 
+       if (len > req->l - body)
+               len = req->l - body;
+
        p = params;
 
        while (len > plen) {