Skip to content

Commit

Permalink
Fix infi loop when buffer ends with \r (fhessel#123) (#3)
Browse files Browse the repository at this point in the history
  • Loading branch information
gb-123-git committed Nov 1, 2023
1 parent cf4fad1 commit bad7d1c
Show file tree
Hide file tree
Showing 2 changed files with 20 additions and 18 deletions.
34 changes: 17 additions & 17 deletions src/HTTPConnection.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -290,26 +290,26 @@ void HTTPConnection::raiseError(uint16_t code, std::string reason) {
void HTTPConnection::readLine(int lengthLimit) {
while(_bufferProcessed < _bufferUnusedIdx) {
char newChar = _receiveBuffer[_bufferProcessed];

if ( newChar == '\r') {
// Look ahead for \n (if not possible, wait for next round
if (_bufferProcessed+1 < _bufferUnusedIdx) {
if (_receiveBuffer[_bufferProcessed+1] == '\n') {
_bufferProcessed += 2;
_parserLine.parsingFinished = true;
return;
} else {
// Line has not been terminated by \r\n
HTTPS_LOGW("Line without \\r\\n (got only \\r). FID=%d", _socket);
raiseError(400, "Bad Request");
return;
}
_bufferProcessed++;
if ( partialTerminationParsed ){
partialTerminationParsed = false;
if (newChar == '\n') {
_parserLine.parsingFinished = true;
}
else {
// Line has not been terminated by \r\n
HTTPS_LOGW("Line without \\r\\n (got only \\r). FID=%d", _socket);
raiseError(400, "Bad Request");
}
} else {
return;
}
if ( newChar == '\r') {
partialTerminationParsed = true;
}
else {
_parserLine.text += newChar;
_bufferProcessed += 1;
}

// Check that the max request string size is not exceeded
if (_parserLine.text.length() > lengthLimit) {
HTTPS_LOGW("Header length exceeded. FID=%d", _socket);
Expand Down
4 changes: 3 additions & 1 deletion src/HTTPConnection.hpp
Original file line number Diff line number Diff line change
Expand Up @@ -132,7 +132,9 @@ class HTTPConnection : private ConnectionContext {
int _bufferProcessed;
// The index on the receive_buffer that is the first one which is empty at the end.
int _bufferUnusedIdx;

// If \r character has been read, in this case we expect \n to terminate the line
bool partialTerminationParsed = false;

// Socket address, length etc for the connection
struct sockaddr _sockAddr;
socklen_t _addrLen;
Expand Down

0 comments on commit bad7d1c

Please sign in to comment.