storm/minidlna
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

minissdp: Harden SSDP request parsing

Browse Source 
Avoids a potential crash from malformed header.
This commit is contained in:
Justin Maggard 2022-02-09 18:31:00 -08:00
parent 1d363c209f
commit b4e55102af
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
minissdp.c
View File

@ -552,27 +552,27 @@ ProcessSSDPRequest(struct event *ev)
if (strncasecmp(bufr+i, "SERVER:", 7) == 0)
{
srv = bufr+i+7;
while (*srv == ' ' || *srv == '\t')
while (*srv && (*srv == ' ' || *srv == '\t'))
srv++;
}
else if (strncasecmp(bufr+i, "LOCATION:", 9) == 0)
{
loc = bufr+i+9;
while (*loc == ' ' || *loc == '\t')
while (*loc && (*loc == ' ' || *loc == '\t'))
loc++;
while (loc[loc_len]!='\r' && loc[loc_len]!='\n')
while (loc[loc_len] && (loc[loc_len]!='\r' && loc[loc_len]!='\n'))
loc_len++;
}
else if (strncasecmp(bufr+i, "NTS:", 4) == 0)
{
nts = bufr+i+4;
while (*nts == ' ' || *nts == '\t')
while (*nts && (*nts == ' ' || *nts == '\t'))
nts++;
}
else if (strncasecmp(bufr+i, "NT:", 3) == 0)
{
nt = bufr+i+3;
while(*nt == ' ' || *nt == '\t')
while(*nt && (*nt == ' ' || *nt == '\t'))
nt++;
}
}