From: Dr. David von Oheimb <David.von.Oheimb@siemens.com>
Date: Mon, 18 Jan 2021 11:05:11 +0000 (+0100)
Subject: Add check of HTTP method to OSSL_HTTP_REQ_CTX_content()
X-Git-Tag: openssl-3.0.0-alpha11~31
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0a20cc4bc3af7bd9bb5860c09683a7a7f4ba39ed;p=thirdparty%2Fopenssl.git

Add check of HTTP method to OSSL_HTTP_REQ_CTX_content()

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/13898)
---

diff --git a/crypto/http/http_client.c b/crypto/http/http_client.c
index d8a6bdec317..731142b1613 100644
--- a/crypto/http/http_client.c
+++ b/crypto/http/http_client.c
@@ -207,6 +207,10 @@ static int OSSL_HTTP_REQ_CTX_content(OSSL_HTTP_REQ_CTX *rctx,
         ERR_raise(ERR_LIB_HTTP, ERR_R_PASSED_NULL_PARAMETER);
         return 0;
     }
+    if (rctx->method_GET) {
+        ERR_raise(ERR_LIB_HTTP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
+        return 0;
+    }
 
     if (content_type != NULL
             && BIO_printf(rctx->mem, "Content-Type: %s\r\n", content_type) <= 0)