| commit | dc8017ced6a8ec699a50a409f3c8ce5928ea70fa | [log] [tgz] |
|---|---|---|
| author | Willy Tarreau <w@1wt.eu> | Sun Dec 06 18:16:59 2009 +0100 |
| committer | Willy Tarreau <w@1wt.eu> | Tue Dec 22 09:52:42 2009 +0100 |
| tree | 17c66a7c151e28070fcb4db1e4254db88230938f | |
| parent | 1a8bea9390024e0d61741eeacf6d13b8661eb014 [diff] |
[BUG] check_post: limit analysis to the buffer length If "balance url_param XXX check_post" is used, we must bound the number of bytes analysed to the buffer's length.
diff --git a/src/backend.c b/src/backend.c index f4e6110..70201ce 100644 --- a/src/backend.c +++ b/src/backend.c
@@ -289,6 +289,9 @@ len = chunk; } + if (len > req->l - body) + len = req->l - body; + p = params; while (len > plen) {