Return-Path: Delivered-To: new-httpd-archive@hyperreal.org Received: (qmail 7513 invoked by uid 6000); 5 Feb 1998 20:22:24 -0000 Received: (qmail 7507 invoked from network); 5 Feb 1998 20:22:23 -0000 Received: from valis.worldgate.com (marcs@198.161.84.2) by taz.hyperreal.org with SMTP; 5 Feb 1998 20:22:23 -0000 Received: from localhost (marcs@localhost) by valis.worldgate.com (8.8.7/8.8.7) with SMTP id NAA06605 for ; Thu, 5 Feb 1998 13:22:21 -0700 (MST) Date: Thu, 5 Feb 1998 13:22:20 -0700 (MST) From: Marc Slemko To: new-httpd@apache.org Subject: Re: case insensitive, multi-line headers In-Reply-To: <9802051110.aa27962@paris.ics.uci.edu> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: new-httpd-owner@apache.org Precedence: bulk Reply-To: new-httpd@apache.org On Thu, 5 Feb 1998, Roy T. Fielding wrote: > >> Look at getline() we handle multiline headers. > > > >Although there's an obvious bug. If there's a line that exceeds the > >buffer size then we bail without reading the rest of the line and any > >possible continuation lines. So we'll treat the rest of the line as if > >it's a new line. Bad. > > Actually, that was on purpose. If we just read a line that is over 8KB, > the chances that we'd give a damn about the next line being a continuation > are very small. Since we lack a 4xx headers too long response, it was > left as-is until post-1.2. *shrug* Marc, where'd the patch go? What we really should do is puke on the whole request if this happens. We should also puke on the whole request if we get too many headers, which was where I started on all this. I ran into so many inter-related things that I haven't had a chance to work it out yet because I'm too busy. I'll look at what Ed's patch does and what I have when I get time.