http: do not try to parse request-line if we do not have enough bytes

superzgg · Oct 22, 2018 · 64ead34 · 64ead34
1 parent 254fbc8
commit 64ead34
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/http.c b/http.c
@@ -1702,6 +1702,8 @@ evhttp_parse_request_line(struct evhttp_request *req, char *line, size_t len)
 		--eos;
 		--len;
 	}
+	if (len < strlen("GET / HTTP/1.0"))
+		return -1;
 
 	/* Parse the request line */
 	method = strsep(&line, " ");