ded/cpp-httplib
1
0
Fork 0
mirror of https://github.com/yhirose/cpp-httplib.git synced 2026-06-10 16:47:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix OSS-Fuzz #508342856: cap Content-Length reservation by payload_max_length_

Browse Source 
A malicious or malformed server response with an enormous Content-Length
header (e.g. 20000000000) caused the client to call res.body.reserve(len)
with the untrusted value, triggering OOM before read_content's
payload_max_length_ check could take effect. Cap the pre-reservation
at payload_max_length_, since reading more than that is never useful.
This commit is contained in:
yhirose
2026-05-01 21:28:57 +09:00
parent cae753425e
commit 2d2efe46da
3 changed files with 87 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
test/fuzzing/corpus/clusterfuzz-testcase-minimized-client_fuzzer-5188033728282624 Normal file
View File

@@ -0,0 +1,3 @@
HTTP/1.1 777
Content-Length:20000000000