libsoup/CVE-2025-32907.patch
Michael Catanzaro 1d87d04452
Backport patches for various CVEs, plus test improvements
Resolves: RHEL-85909
  Resolves: RHEL-85915
  Resolves: RHEL-85920
  Resolves: RHEL-87058
  Resolves: RHEL-87068
  Resolves: RHEL-87101
  Resolves: RHEL-87119
  Resolves: RHEL-88360
  Resolves: RHEL-88363
2025-04-30 21:02:44 -05:00

32 lines
1.0 KiB
Diff

From 84e601252a9ae5eafaba9cb9cb5e4bd77ca41bdb Mon Sep 17 00:00:00 2001
From: Milan Crha <mcrha@redhat.com>
Date: Tue, 15 Apr 2025 12:17:39 +0200
Subject: [PATCH] soup-message-headers: Correct merge of ranges
It had been skipping every second range, which generated an array
of a lot of insane ranges, causing large memory usage by the server.
Closes #428
---
libsoup/soup-message-headers.c | 1 +
tests/meson.build | 1 +
tests/server-mem-limit-test.c | 144 +++++++++++++++++++++++++++++++++
3 files changed, 146 insertions(+)
create mode 100644 tests/server-mem-limit-test.c
diff --git a/libsoup/soup-message-headers.c b/libsoup/soup-message-headers.c
index 64847e30..f612bff1 100644
--- a/libsoup/soup-message-headers.c
+++ b/libsoup/soup-message-headers.c
@@ -1024,6 +1024,7 @@ soup_message_headers_get_ranges_internal (SoupMessageHeaders *hdrs,
if (cur->start <= prev->end) {
prev->end = MAX (prev->end, cur->end);
g_array_remove_index (array, i);
+ i--;
}
}
}
--
2.49.0