diff options
| author | Simon Robertshaw <simon@hardwired.org.uk> | 2012-09-11 12:13:24 (GMT) |
|---|---|---|
| committer | Simon Robertshaw <simon@hardwired.org.uk> | 2012-09-11 12:13:24 (GMT) |
| commit | 771d5df5c9796bb5d6f6c4cae453b138dd17f192 (patch) | |
| tree | e983ce2d53697785c42a79ccb60336cc6e314932 /src/client/HTTP.cpp | |
| parent | 89c50d8be20969931a493e09ac2681bfcc850c23 (diff) | |
| download | powder-771d5df5c9796bb5d6f6c4cae453b138dd17f192.zip powder-771d5df5c9796bb5d6f6c4cae453b138dd17f192.tar.gz | |
Fix buffer overflow with HTTP headers caused by recent \r\n commit"
Diffstat (limited to 'src/client/HTTP.cpp')
| -rw-r--r-- | src/client/HTTP.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/client/HTTP.cpp b/src/client/HTTP.cpp index 1bb75a3..71adc02 100644 --- a/src/client/HTTP.cpp +++ b/src/client/HTTP.cpp @@ -311,7 +311,7 @@ void *http_async_req_start(void *ctx, char *uri, char *data, int dlen, int keep) void http_async_add_header(void *ctx, char *name, char *data) { struct http_ctx *cx = (http_ctx *)ctx; - cx->thdr = (char *)realloc(cx->thdr, cx->thlen + strlen(name) + strlen(data) + 4); + cx->thdr = (char *)realloc(cx->thdr, cx->thlen + strlen(name) + strlen(data) + 5); cx->thlen += sprintf(cx->thdr+cx->thlen, "%s: %s\r\n", name, data); } |