From 0859b34fddfdff19f1f36b3bda6e110afef66a1f Mon Sep 17 00:00:00 2001 From: reyk Date: Tue, 6 Jan 2015 17:48:04 +0000 Subject: [PATCH] I missed one goto abort instead of free(line). Found by Fabian Raetz at gmail --- usr.sbin/httpd/server_http.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/usr.sbin/httpd/server_http.c b/usr.sbin/httpd/server_http.c index 5568840e3a5..b0ae73d2e05 100644 --- a/usr.sbin/httpd/server_http.c +++ b/usr.sbin/httpd/server_http.c @@ -1,4 +1,4 @@ -/* $OpenBSD: server_http.c,v 1.61 2015/01/06 13:48:15 reyk Exp $ */ +/* $OpenBSD: server_http.c,v 1.62 2015/01/06 17:48:04 reyk Exp $ */ /* * Copyright (c) 2006 - 2014 Reyk Floeter @@ -166,9 +166,8 @@ server_read_http(struct bufferevent *bev, void *arg) /* Limit the total header length minus \r\n */ clt->clt_headerlen += linelen; if (clt->clt_headerlen > SERVER_MAXHEADERLENGTH) { - free(line); server_abort_http(clt, 413, "request too large"); - return; + goto abort; } /* -- 2.20.1