CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/10/16 00:34:27
Modified files:
usr.sbin/ocspcheck: http.c
Log message:
ocspcheck: limit HTTP response header size
Reject response headers that would exceed 64 KB before growing the
header buffer. A responder could otherwise stream data without a
header terminator and cause ocspcheck to allocate memory indefinitely.
>From Frank Denis, also reported by Aziz ELBELAYCHY
ok tb@
