nghttpx: Check max length of ALPN field

a2bc88f6 · Tatsuhiro Tsujikawa · 5ce8ae79 · a2bc88f6
Commit a2bc88f6 authored Nov 14, 2014 by Tatsuhiro Tsujikawa
Show whitespace changes
Inline Side-by-side

Showing with 5 additions and 0 deletions

src/shrpx_ssl.cc src/shrpx_ssl.cc +5 -0

No files found.
--- a/src/shrpx_ssl.cc
+++ b/src/shrpx_ssl.cc
@@ -99,6 +99,11 @@ std::vector<unsigned char> set_alpn_prefs(const std::vector<char*>& protos)
    len += 1 + n;
  }
+  if(len > (1 << 16) - 1) {
+      LOG(FATAL) << "Too long ALPN identifier list: " << len;
+      DIE();
+  }
  auto out = std::vector<unsigned char>(len);
  auto ptr = out.data();