www/apache
1
0
Fork 0
mirror of https://github.com/apache/httpd.git synced 2025-11-17 00:03:29 +03:00
Code Activity

Merge r1866760 from ^/httpd/apreq/trunk:

Browse Source 
parser_multipart: fix NULL pointer dereference in nested multipart

create_multipart_context() can return NULL if the given Content-Type
was not recognized (if there is no "boundary" attribute).  This
crashes libapreq2.

This bug was introduced by SVN commit 227276.  Prior to this commit,
there was a NULL check, but the commit removed it:

 http://svn.apache.org/viewvc/httpd/apreq/trunk/library/parser_multipart.c?r1=227276&r2=227275&pathrev=227276

Submitted by: max 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1867761 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Joe Orton
2019-09-30 09:50:44 +00:00
parent a0f5d7e049
commit 4fa8d6d8a4
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
server/apreq_parser_multipart.c
View File

@@ -410,6 +410,10 @@ APREQ_DECLARE_PARSER(apreq_parse_multipart)
parser->brigade_limit,
parser->temp_dir,
ctx->level + 1);
if (next_ctx == NULL) {
ctx->status = MFD_ERROR;
goto mfd_parse_brigade;
}
next_ctx->param_name = "";