Commit 25f54e9

authored

Merge pull request #176 from arduino-libraries/iContentLength_wraparound

Make sure iContentLength doesn't wrap around due to malformed packets

2 parents 6f2659d + 1a3fb98 commit 25f54e9Copy full SHA for 25f54e9

File tree

-1

lines changed

-1

lines changed

Lines changed: 5 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -819,7 +819,11 @@ int HttpClient::readHeader()`
`819`	`819`	`case eReadingContentLength:`
`820`	`820`	`if (isdigit(c))`
`821`	`821`	`{`
`822`		`- iContentLength = iContentLength*10 + (c - '0');`
	`822`	`+ long _iContentLength = iContentLength*10 + (c - '0');`
	`823`	`+ // Only apply if the value didn't wrap around`
	`824`	`+ if (_iContentLength > iContentLength) {`
	`825`	`+ iContentLength = _iContentLength;`
	`826`	`+ }`
`823`	`827`	`}`
`824`	`828`	`else`
`825`	`829`	`{`

Comments

(0)