libmicrohttpd/cve-2023-27371.patch
2023-04-06 13:37:29 +02:00

14 lines
614 B
Diff

diff --git a/src/microhttpd/postprocessor.c b/src/microhttpd/postprocessor.c
index 8b710ea..427d4c6 100644
--- a/src/microhttpd/postprocessor.c
+++ b/src/microhttpd/postprocessor.c
@@ -310,7 +310,7 @@ MHD_create_post_processor (struct MHD_Connection *connection,
return NULL; /* failed to determine boundary */
boundary += MHD_STATICSTR_LEN_ ("boundary=");
blen = strlen (boundary);
- if ( (blen == 0) ||
+ if ( (blen < 2) ||
(blen * 2 + 2 > buffer_size) )
return NULL; /* (will be) out of memory or invalid boundary */
if ( (boundary[0] == '"') &&