storm/minidlna
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

minissdp: Harden SSDP request parsing

Browse Source 
Avoids a potential crash from malformed header.
This commit is contained in:
Justin Maggard 2022-02-09 18:31:00 -08:00
parent 1d363c209f
commit b4e55102af
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
minissdp.c
View File

@ -552,27 +552,27 @@ ProcessSSDPRequest(struct event *ev)
if (strncasecmp(bufr+i, "SERVER:", 7) == 0) if (strncasecmp(bufr+i, "SERVER:", 7) == 0)
{ {
srv = bufr+i+7; srv = bufr+i+7;
while (*srv == ' ' || *srv == '\t') while (*srv && (*srv == ' ' || *srv == '\t'))
srv++; srv++;
} }
else if (strncasecmp(bufr+i, "LOCATION:", 9) == 0) else if (strncasecmp(bufr+i, "LOCATION:", 9) == 0)
{ {
loc = bufr+i+9; loc = bufr+i+9;
while (*loc == ' ' || *loc == '\t') while (*loc && (*loc == ' ' || *loc == '\t'))
loc++; loc++;
while (loc[loc_len]!='\r' && loc[loc_len]!='\n') while (loc[loc_len] && (loc[loc_len]!='\r' && loc[loc_len]!='\n'))
loc_len++; loc_len++;
} }
else if (strncasecmp(bufr+i, "NTS:", 4) == 0) else if (strncasecmp(bufr+i, "NTS:", 4) == 0)
{ {
nts = bufr+i+4; nts = bufr+i+4;
while (*nts == ' ' || *nts == '\t') while (*nts && (*nts == ' ' || *nts == '\t'))
nts++; nts++;
} }
else if (strncasecmp(bufr+i, "NT:", 3) == 0) else if (strncasecmp(bufr+i, "NT:", 3) == 0)
{ {
nt = bufr+i+3; nt = bufr+i+3;
while(*nt == ' ' || *nt == '\t') while(*nt && (*nt == ' ' || *nt == '\t'))
nt++; nt++;
} }
} }