HTTP parser: restricting control chars in header fields values.

This also fixes an infinite loop here (found with honggfuzz).
nginx · Jan 24, 2018 · 477e817 · 477e817
1 parent 7e3480b
commit 477e817
Showing 1 changed file with 1 addition and 3 deletions.
diff --git a/src/nxt_http_parse.c b/src/nxt_http_parse.c
@@ -650,9 +650,7 @@ nxt_http_parse_field_value(nxt_http_request_parse_t *rp, u_char **pos,
             break;
         }
 
-        if (ch == '\0') {
-            return NXT_HTTP_PARSE_INVALID;
-        }
+        return NXT_HTTP_PARSE_INVALID;
     }
 
     if (nxt_fast_path(p != *pos)) {