weston-embedded/uC-TCP-IP

Denial of Service with multipart forms when '=' not found

Closed this issue · 1 comments

if the '=' character is not found in a multipart form request,a NULL pointer is returned in Str_Char_N, this pointer is then incremented and dereferenced which can lead to a crash. See HTTPsReq_HdrParse() for details. I recommend adding a test for NULL.

wrong project