security harden http parser a bit 86/3086/1
authorAndy Green <andy.green@linaro.org>
Tue, 12 Feb 2013 04:52:39 +0000 (12:52 +0800)
committerKevron Rees <kevron_m_rees@linux.intel.com>
Thu, 7 Mar 2013 21:01:35 +0000 (13:01 -0800)
commitfa01b04f8161b22101e6e023f45a1aa0f78a9cf8
tree3745223b5c3937fb9abfcb32fdb85ec08f6bc52b
parenteefcf3402f15bff9b4724564c5180e688e0be206
security harden http parser a bit

Drop the connection during parsing for a few more cases that can't be legit.

Take care about trying to free rxflow_buffer only if we reached a connmode
where it exists

Change behaviour on setting unknown HTTP method to kill connection

Signed-off-by: Andy Green <andy.green@linaro.org>
lib/handshake.c
lib/libwebsockets.c
lib/parsers.c