mirror/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2025-07-21 19:56:23 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

HTTP: do not allow status line to end with bare LF

Browse Source 
This is consistent with llhttp.
This commit is contained in:
Demi Marie Obenour 2025-03-16 17:07:40 -04:00
parent bd37faff72
commit 7032a60fa0
1 changed files with 0 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/http/ngx_http_parse.c
View File

@ -732,10 +732,6 @@ ngx_http_parse_request_line(ngx_http_request_t *r, ngx_buf_t *b)
break; break;
} }
if (ch == LF) {
goto done;
}
if (ch == ' ') { if (ch == ' ') {
state = sw_spaces_after_digit; state = sw_spaces_after_digit;
break; break;
@ -1896,8 +1892,6 @@ ngx_http_parse_status_line(ngx_http_request_t *r, ngx_buf_t *b,
case CR: case CR:
state = sw_almost_done; state = sw_almost_done;
break; break;
case LF:
goto done;
default: default:
return NGX_ERROR; return NGX_ERROR;
} }
@ -1910,7 +1904,6 @@ ngx_http_parse_status_line(ngx_http_request_t *r, ngx_buf_t *b,
state = sw_almost_done; state = sw_almost_done;
break; break;
case LF:
goto done; goto done;
default: default:
if (ch < 0x20 || ch == 0x7f) { if (ch < 0x20 || ch == 0x7f) {