TechnikEmpire / HttpFilteringEngine

Transparent filtering TLS proxy.
Mozilla Public License 2.0
60 stars 33 forks source link

BaseHttpTransaction::SetPayload() Does no bounds check. #19

Closed TechnikEmpire closed 8 years ago

TechnikEmpire commented 8 years ago

When using subscript access on the supplied payload vector to check for terminating double CRLF, both BaseHttpTransaction::SetPayload() overloads do not check to make sure that the size of the vector is at least the size of the indices being used. Fixed in next commit.