tree 48a8acb179b010b097662fd4f42decac697f1723
parent b29a1dc2f4a334c1c7fea76c59abb4097422c05c
author Mateusz Malek <haproxy@sl.damisa.net> 1660738929 +0200
committer Willy Tarreau <w@1wt.eu> 1660744337 +0200
encoding latin1

BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names

When using `option http-restrict-req-hdr-names delete`, HAproxy may
crash or delete wrong header after receiving request containing multiple
forbidden characters in single header name; exact behavior depends on
number of request headers, number of forbidden characters and position
of header containing them.

This patch fixes GitHub issue #1822.

Must be backported as far as 2.2 (buggy feature got included in 2.2.25,
2.4.18 and 2.5.8).