[lwip-devel] [bug #53959] HTTPD SSI bug when tag crosses block boundary

[Szabolcs Szekelyi]

URL:
  <http://savannah.nongnu.org/bugs/?53959>

                 Summary: HTTPD SSI bug when tag crosses block boundary
                 Project: lwIP - A Lightweight TCP/IP stack
            Submitted by: szekelyisz
            Submitted on: Tue 22 May 2018 02:59:25 PM UTC
                Category: apps
                Severity: 3 - Normal
              Item Group: Faulty Behaviour
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
         Planned Release: None
            lwIP version: 2.0.3

    _______________________________________________________

Details:

Processing SSI tags goes completely wrong when the end of the buffer is in the
middle of a tag in http_send_data_ssi().

The main problem is that in this case, when the processing of the new block
starts, ssi->tag_start points to the beginning of the tag that started
somewhere close to end of the previous buffer whereas hs->file points to the
beginning of the new block, but the code has no idea about the buffers being
different. So it thinks that the tag started somewhere close to the end of the
current buffer, and since hs->file points to the beginning, it sends almost
the whole buffer without any processing.




    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?53959>

_______________________________________________
  Message sent via Savannah
  https://savannah.nongnu.org/