From fe36e068f670014026dc67e0fc6533b193815f52 Mon Sep 17 00:00:00 2001 From: Stefan Ritt Date: Wed, 6 Dec 2017 13:34:34 +0100 Subject: [PATCH] Fixed crash on negative Content-Length in header --- src/elogd.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/elogd.c b/src/elogd.c index 4ff1e96e..f5b7153a 100755 --- a/src/elogd.c +++ b/src/elogd.c @@ -29204,6 +29204,11 @@ int process_http_request(const char *request, int i_conn) content_length = atoi(strstr(request, "Content-Length:") + 15); else if (strstr(request, "Content-length:")) content_length = atoi(strstr(request, "Content-length:") + 15); + if (content_length <= 0) { + show_error("Invalid Content-Length in header"); + xfree(str); + return 1; + } /* extract header length */ if (strstr(request, "\r\n\r\n"))