0001-mod_extforward-fix-out-of-bounds-OOB-write-of-4-byte.patch - Lighttpd - lighty labs

Bug #3134 » 0001-mod_extforward-fix-out-of-bounds-OOB-write-of-4-byte.patch

povcfe-bug, 2022-01-05 11:14

             while (s[i] == ' ' || s[i] == '\t') ++i;
             if (s[i] == ';') { ++i; continue; }
             if (s[i] == ',') {
                 if (j >= (int)(sizeof(offsets)/sizeof(int))) break;
                 if (j >= (int)((sizeof(offsets)/sizeof(int)) - 1)) break;
                 offsets[++j] = -1; /*("offset" separating params from next proxy)*/
                 ++i;
                 continue;

(4-4/4)