From: Willy Tarreau <w@1wt.eu>
Date: Sun, 16 Dec 2018 07:29:56 +0000 (+0100)
Subject: BUG/MEDIUM: mux-h1: don't try to process an empty input buffer
X-Git-Tag: v1.9-dev11~4
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3a6190fcd0026ea89c32e26d3f15ba3224aa74bb;p=thirdparty%2Fhaproxy.git

BUG/MEDIUM: mux-h1: don't try to process an empty input buffer

h1_process_input() may occasionally be called with an empty input
buffer, and the code behind cannot deal with that, let's check the
condition at the beginning.

No backport is needed.
---

diff --git a/src/mux_h1.c b/src/mux_h1.c
index 45d24c1836..4e884ed8f3 100644
--- a/src/mux_h1.c
+++ b/src/mux_h1.c
@@ -1278,6 +1278,9 @@ static size_t h1_process_input(struct h1c *h1c, struct buffer *buf, int flags)
 	if (count > max)
 		count = max;
 
+	if (!count)
+		goto end;
+
 	if (!conn_is_back(h1c->conn)) {
 		h1m = &h1s->req;
 		errflag = H1S_F_REQ_ERROR;