FS#73704 - Poor parsing of Content-Disposition:filename

Attached to Project: Pacman
Opened by Allan McRae (Allan) - Thursday, 10 February 2022, 01:24 GMT
Last edited by Allan McRae (Allan) - Tuesday, 08 March 2022, 00:03 GMT
Task Type Bug Report
Category General
Status Closed
Assigned To Allan McRae (Allan)
Architecture All
Severity High
Priority Normal
Reported Version 6.0.1
Due in Version 6.0.2
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Content-Disposition:filename=""; will strndup(payload->content_disp_name, -1, ptr) from the header buffer
Content-Disposition:filename=";moredata

fptr and endptr will both point to the " and result in -1

This just seems to be an information leakage and should be trivially patched.
This task depends upon

Closed by  Allan McRae (Allan)
Tuesday, 08 March 2022, 00:03 GMT
Reason for closing:  Fixed
Additional comments about closing:  git commit 40583ebe892018587ef354993dee15cff9c808d6

Loading...