HTTP parser: restricting control chars in header fields values.

VBart · VBart · commit 477e8177b70a · 2018-01-24T15:02:56.000+03:00
This also fixes an infinite loop here (found with honggfuzz).
diff --git a/src/nxt_http_parse.c b/src/nxt_http_parse.c
@@ -650,9 +650,7 @@ nxt_http_parse_field_value(nxt_http_request_parse_t *rp, u_char **pos,
             break;
         }
 
-        if (ch == '\0') {
-            return NXT_HTTP_PARSE_INVALID;
-        }
+        return NXT_HTTP_PARSE_INVALID;
     }
 
     if (nxt_fast_path(p != *pos)) {
