Re: [bug-serveez] Serveez Information Leak Vulnerability

[Austin James Gadient]

Hi Raimund,

Ah sorry about that and no problem!

I have attached a patch file that you should be able to apply from the 
serveez-0.2.2 directory.

Let me know if you have any issues and thank you for your time!

Best Regards,
Austin
________________________________________
From: Raimund 'Raimi' Jacob-Blödorn <address@hidden>
Sent: Saturday, November 9, 2019 10:58 AM
To: Austin James Gadient; address@hidden
Subject: Re: [bug-serveez] Serveez Information Leak Vulnerability

On 11/7/19 5:57 PM, Austin James Gadient wrote:

Hello Austin!

> Just following up. Have you had a chance to look at this?

Well, I cannot do much with your Mac OS compilation attempts.

I tried to diff your sources against the "next" branch of the serveez
git repository but could not identify any change of yours.

If I understand you correctly, it should be sufficient to make
http->contentlength an unsigned int (and/or have an arbitrary cap somwhere).

I am really sorry to have so little time to investigate. But if you send
mit a simple diff I'll do my best to apply it.

Greetings,

        Raimund

http_contentlength.patch
Description: http_contentlength.patch