Subject: Buffer index protection in the case where client does not

 receive content length from HTTP server

diff --git a/lib/service.c b/lib/service.c
index 48726c1..31c96b1 100644 (file)
--- a/lib/service.c
+++ b/lib/service.c
@@ -665,7 +665,10 @@ spin_chunks:
        if (wsi->chunked)
                return 0;
 
-       wsi->u.http.content_remain -= n;
+       /* if we know the content length, decrement the content remaining */
+       if (wsi->u.http.content_length > 0)
+               wsi->u.http.content_remain -= n;
+
        if (wsi->u.http.content_remain || !wsi->u.http.content_length)
                return 0;