a2465c456e
- build with OpenSSL 1.1 - broken multipart/form-data (CVE-2018-16789) - Interpret aixterm high-intensity color escape codes All these patches came from the project pull requests list. Reported by: pkg-fallout Security: CVE-2018-16789
12 lines
312 B
C
12 lines
312 B
C
--- libhttp/url.c.orig 2016-11-09 19:40:33 UTC
|
|
+++ libhttp/url.c
|
|
@@ -312,6 +312,9 @@ static void urlParsePostBody(struct URL *url,
|
|
}
|
|
}
|
|
}
|
|
+ } else {
|
|
+ warn("[http] broken multipart/form-data!");
|
|
+ break;
|
|
}
|
|
}
|
|
if (lastPart) {
|