android/okhttp
1
0
Fork 0
mirror of https://github.com/square/okhttp.git synced 2026-01-27 04:22:07 +03:00
Code Releases Activity

Merge pull request #127 from narayank/master

Browse Source 
Guard against invalid name value block headers.
This commit is contained in:
Jesse Wilson
2013-03-15 07:39:21 -07:00
parent 0100630551 2f1629d593
commit ba2b7432cb
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/main/java/com/squareup/okhttp/internal/spdy/SpdyReader.java
View File

@@ -232,6 +232,10 @@ final class SpdyReader implements Closeable {
this.compressedLimit += length;
try {
int numberOfPairs = nameValueBlockIn.readInt();
if (numberOfPairs < 0) {
Logger.getLogger(getClass().getName()).warning("numberOfPairs < 0: " + numberOfPairs);
throw ioException("numberOfPairs < 0");
}
List<String> entries = new ArrayList<String>(numberOfPairs * 2);
for (int i = 0; i < numberOfPairs; i++) {
String name = readString();