diff options
author | Stelios Fragkakis <52996999+stelfrag@users.noreply.github.com> | 2020-12-15 14:36:19 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-12-15 14:36:19 +0200 |
commit | c6083cc97cea09ce692fd32903b72fb32885f565 (patch) | |
tree | a90aec6f19a4586fb54faad7da21ccb99d35d2fa /web | |
parent | 72ea74bf310fe76682fc4a25729ad5b74662a4a6 (diff) |
Fix a buffer overflow when extracting information from a STREAM connection (#10391)
Diffstat (limited to 'web')
-rw-r--r-- | web/server/web_client.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/web/server/web_client.c b/web/server/web_client.c index c16d8c711e..f0856fb173 100644 --- a/web/server/web_client.c +++ b/web/server/web_client.c @@ -864,7 +864,7 @@ static inline char *web_client_valid_method(struct web_client *w, char *s) { copyme += 9; char *end = strchr(copyme,'&'); if(end){ - size_t length = end - copyme; + size_t length = MIN(255, end - copyme); memcpy(hostname,copyme,length); hostname[length] = 0X00; } |