[CRITICAL] an empty header may lead to a crash
A missing pointer assignment in case of an empty header
will result in this header's length being 65535, causing
a SEGV when accessing the next header. It should not be
possible to exploit this problem to run arbitrary code
because the crash occurs while reading the data.
diff --git a/src/proto_http.c b/src/proto_http.c
index 5aad97d..c7d91d3 100644
--- a/src/proto_http.c
+++ b/src/proto_http.c
@@ -1018,6 +1018,7 @@
buf->data[msg->sov] = ' ';
goto http_msg_hdr_l1_sp;
}
+ msg->eol = ptr;
goto http_msg_complete_header;
http_msg_hdr_val: