diff options
| author | Edward Thomson <ethomson@edwardthomson.com> | 2020-06-01 23:53:55 +0100 |
|---|---|---|
| committer | Edward Thomson <ethomson@edwardthomson.com> | 2020-06-01 23:56:18 +0100 |
| commit | aa8b2c0f6068454d30e9b0f20f424311337a37f1 (patch) | |
| tree | 131e1fa59d0dd380af1e3a579670abf99346d0fc /src | |
| parent | 570f0340f06f49b06ff536463cec8a2e2411b948 (diff) | |
| download | libgit2-aa8b2c0f6068454d30e9b0f20f424311337a37f1.tar.gz | |
httpclient: don't read more than the client wants
When `git_http_client_read_body` is invoked, it provides the size of the
buffer that can be read into. This will be set as the parser context's
`output_size` member. Use this as an upper limit on our reads, and
ensure that we do not read more than the client requests.
Diffstat (limited to 'src')
| -rw-r--r-- | src/transports/httpclient.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/transports/httpclient.c b/src/transports/httpclient.c index af90129df..72a65f00f 100644 --- a/src/transports/httpclient.c +++ b/src/transports/httpclient.c @@ -1038,6 +1038,7 @@ on_error: GIT_INLINE(int) client_read(git_http_client *client) { + http_parser_context *parser_context = client->parser.data; git_stream *stream; char *buf = client->read_buf.ptr + client->read_buf.size; size_t max_len; @@ -1054,6 +1055,9 @@ GIT_INLINE(int) client_read(git_http_client *client) max_len = client->read_buf.asize - client->read_buf.size; max_len = min(max_len, INT_MAX); + if (parser_context->output_size) + max_len = min(max_len, parser_context->output_size); + if (max_len == 0) { git_error_set(GIT_ERROR_HTTP, "no room in output buffer"); return -1; |