Commit 35110eca authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

James Bursa identified a libcurl HTTP bug and a good way to repeat it. If a 

site responds with bad HTTP response that doesn't contain any header at all,
only a response body, and the write callback returns 0 to abort the
transfer, it didn't have any real effect but the write callback would be
called once more anyway.
parent 9ad92b30

lib/transfer.c

+2 −0
Original line number Diff line number Diff line
@@ -1134,6 +1134,8 @@ CURLcode Curl_readwrite(struct connectdata *conn, 
              result = Curl_client_write(data, CLIENTWRITE_BODY,

                                         data->state.headerbuff,

                                         k->hbuflen);

              if(result)

                return result;

            }

            if(k->badheader < HEADER_ALLBAD) {

              /* This switch handles various content encodings. If there's an