WPS: Fix HTTP body length check
authorJouni Malinen <j@w1.fi>
Mon, 24 Aug 2015 21:17:00 +0000 (00:17 +0300)
committerJouni Malinen <j@w1.fi>
Mon, 24 Aug 2015 21:17:00 +0000 (00:17 +0300)
commit2ce741fe0f7335dd8a6ca787d3ad95748e0f8d2f
treeea0c00a1b3c44e442b588d4c78205e3477cc2239
parent20f331b7072b07e08f9600512356f6cf559cb3a3
WPS: Fix HTTP body length check

Commit 7da4f4b4991c85f1122a4591d8a4b7dd3bd12b4e ('WPS: Check maximum
HTTP body length earlier in the process') added too strict check for
body length allocation. The comparison of new_alloc_nbytes against
h->max_bytes did not take into account that HTTPREAD_BODYBUF_DELTA was
added to previous allocation even if that ended up going beyond
h->max_bytes. This ended up rejecting some valid HTTP operations, e.g.,
when checking AP response to WPS ER setting selected registrar.

Fix this by taking HTTPREAD_BODYBUF_DELTA into account.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/wps/httpread.c