From 3bba8e95482de6f03d04dba4808e9add2071296b Mon Sep 17 00:00:00 2001 From: Guus Sliepen Date: Fri, 6 Mar 2020 23:24:49 +0100 Subject: [PATCH] Don't abort on empty lines in receive_request(). Remove the assertion that lines are not empty, since this could lead to a DoS attack. Empty lines are already handled correctly by the rest of the logic in receive_request(). --- src/protocol.c | 1 - 1 file changed, 1 deletion(-) diff --git a/src/protocol.c b/src/protocol.c index fa1dc137..b4cb5ad5 100644 --- a/src/protocol.c +++ b/src/protocol.c @@ -129,7 +129,6 @@ void forward_request(meshlink_handle_t *mesh, connection_t *from, submesh_t *s, bool receive_request(meshlink_handle_t *mesh, connection_t *c, const char *request) { assert(request); - assert(*request); if(c->outgoing && mesh->proxytype == PROXY_HTTP && c->allow_request == ID) { if(!request[0] || request[0] == '\r') { -- 2.39.2