Commit d95fa648 authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

made it return illegal hex in case no hexadecimal digit was read when at 

least one was expected
parent 563ad213

lib/http_chunks.c

+9 −2
Original line number Diff line number Diff line
@@ -115,10 +115,15 @@ CHUNKcode Curl_httpchunk_read(struct connectdata *conn, 
          ch->hexindex++;

        }

        else {

          return 1; /* longer hex than we support */

          return CHUNKE_TOO_LONG_HEX; /* longer hex than we support */

        }

      }

      else {

        if(0 == ch->hexindex) {

          /* This is illegal data, we received junk where we expected

             a hexadecimal digit. */

          return CHUNKE_ILLEGAL_HEX;

        }

        /* length and datap are unmodified */

        ch->hexbuffer[ch->hexindex]=0;

        ch->datasize=strtoul(ch->hexbuffer, NULL, 16);
@@ -127,7 +132,9 @@ CHUNKcode Curl_httpchunk_read(struct connectdata *conn, 
      break;



    case CHUNK_POSTHEX:

      /* just a lame state waiting for CRLF to arrive */

      /* In this state, we're waiting for CRLF to arrive. We support

         this to allow so called chunk-extensions to show up here

         before the CRLF comes. */

      if(*datap == '\r')

        ch->state = CHUNK_CR;

      length--;