Re: [AOLSERVER] Ns_ConnReadLine return codes

[Jim Davidson]

In a message dated 6/19/05 5:51:32 AM, [EMAIL PROTECTED] writes:

My reason for the 'maxline' usage is to cut off strange
kiddies e.g., ones that try to exploit ms-iis bugs on any
server.

Ah -- then check for maxline in driver.c.  I found the following config:


    if (!Ns_ConfigGetInt(path, "maxline", &n) || n < 1) {
        n = 4 * 1024;   /* 4k per-line limit. */
    }
    drvPtr->maxline = _MAX(n, 256);


and the following limit check:

        /*
         * Check for max single line overflow.
         */

        if ((e - s) > drvPtr->maxline) {
            return E_LRANGE;
        }



This is in the latest 4.5 code -- should work.  btw: is the default 4k max, 256byte min reasonable?

-jim
2">