narfindustries / http-garden

Differential fuzzing REPL for HTTP implementations.
GNU General Public License v3.0
716 stars 64 forks source link

Fuzzer doesn't account for the fact that Lighttpd ignores empty header values #23

Open kenballus opened 9 months ago

kenballus commented 9 months ago

this could use a normalization

gstrauss commented 9 months ago

Yes, for simplicity, lighttpd ignores empty request headers. (Previously discussed in https://redmine.lighttpd.net/issues/3219#note-4)

kenballus commented 9 months ago

Yes; I should have made the text of this bug clearer. This is a bug in the Garden that causes unimportant discrepancies to be reported because Lighttpd ignores empty headers, not a bug in Lighttpd that needs to be fixed.