do not let Body read beyond its length

http-rs / http-types

Common types for HTTP operations

https://docs.rs/http-types

Apache License 2.0

200 stars 83 forks source link

do not let Body read beyond its length #282

Closed jbr closed 3 years ago

jbr commented 3 years ago

this logic is currently handled in several places in async-h1, but it should be the responsibility of Body to ensure that if it has a set length, it will not read beyond that length.

I believe this is semver-patch, unless we consider "reading past set body length" intended behavior