http_protocol: make request processing more robust for incomplete data

- Length restrictions may error on a too long request path, leaving
  the uri unset.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1910533 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/server/protocol.c b/server/protocol.c
index f9ab8b52f0ae0d5c12da77f47658fd4dbe9b67bf..9ac4e3fe929f6f41b7a6e2dc2d865fceb02fe33e 100644 (file)
--- a/server/protocol.c
+++ b/server/protocol.c
@@ -1368,9 +1368,16 @@ AP_DECLARE(request_rec *) ap_read_request(conn_rec *conn)
             headers = breq->headers? apr_table_clone(r->pool, breq->headers) : NULL;
         }
 
+        if (!method || !uri || !protocol) {
+            access_status = berr? ((ap_bucket_error *)(berr->data))->status :
+                                  HTTP_INTERNAL_SERVER_ERROR;
+            goto die_unusable_input;
+        }
+
         if (headers) {
             r->headers_in = headers;
         }
+
         ap_log_rerror(APLOG_MARK, APLOG_TRACE2, 0, r,
                       "checking request: %s %s %s",
                       method, uri, protocol);