aboutsummaryrefslogtreecommitdiff
path: root/libweb
diff options
context:
space:
mode:
authorXavier Del Campo Romero <xavi.dcr@tutanota.com>2024-02-19 23:03:16 +0100
committerXavier Del Campo Romero <xavi.dcr@tutanota.com>2024-02-19 23:35:08 +0100
commitf6b84b765d6fa4d95aae5501fedca5cd8903e224 (patch)
tree41d7d68279c42e8e6b725ce451217c9a50dea641 /libweb
parent0f889b409e20aea188e88b79b73ded992fc6af33 (diff)
downloadslcl-f6b84b765d6fa4d95aae5501fedca5cd8903e224.tar.gz
Bump libweb to 0.3.0
The following commits fix a couple of security issues on libweb. Because of afe0681c0b26bb64bad55d7e86770f346cfa043e, slcl had to be updated to set up its struct http_cfg_post. commit afe0681c0b26bb64bad55d7e86770f346cfa043e Author: Xavier Del Campo Romero <xavi.dcr@tutanota.com> Date: Mon Feb 19 23:00:56 2024 +0100 Limit maximum multipart/form-data pairs and files A malicious user could inject an infinite number of empty files or key/value pairs into a request in order to exhaust the device's resources. commit 9d9e0c2979f43297b2ebbf84f14f064f3f9ced0e Author: Xavier Del Campo Romero <xavi.dcr@tutanota.com> Date: Mon Feb 19 22:49:09 2024 +0100 html.c: Avoid half-init objects on html_node_add_attr The previous implementation would leave half-initialised objects if one of the calls to strdup(3) failed. Now, n->attrs is only modified when all previous memory allocations were successful.
Diffstat (limited to 'libweb')
m---------libweb0
1 files changed, 0 insertions, 0 deletions
diff --git a/libweb b/libweb
-Subproject 6ceae16a20175edb77fb2ffab0d3d6648d01122
+Subproject b4930f72bb9026c5a0871f4fa4cabe20cb0e6a9