commit 9ffecc0d85da71ae985b07afb382309b61bde4f5
parent 3f0bbe26d46a81a3ba8c5ef0c21a72b3ce24fa02
Author: Evgeny Grin (Karlson2k) <k2k@drgrin.dev>
Date: Wed, 8 Jul 2026 23:13:51 +0200
response_add_header: reject empty header name
Diffstat:
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/src/mhd2/response_add_header.c b/src/mhd2/response_add_header.c
@@ -250,7 +250,8 @@ response_add_header_int (struct MHD_Response *restrict response,
if (response->frozen) /* Re-check with the lock held */
return MHD_SC_TOO_LATE;
- if ((NULL != memchr (name, ' ', name_len))
+ if ((0u == name_len)
+ || (NULL != memchr (name, ' ', name_len))
|| (NULL != memchr (name, '\t', name_len))
|| (NULL != memchr (name, ':', name_len))
|| (NULL != memchr (name, '\n', name_len))