CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/10/16 00:42:46
Modified files:
usr.sbin/ocspcheck: http.c
Log message:
ocspcheck: limit HTTP response body size
Reject OCSP response bodies larger than 20 KB before growing the body
buffer. A responder could otherwise stream data indefinitely and cause
ocspcheck to exhaust memory.
>From Frank Denis, also reported by Aziz ELBELAYCHY
ok tb@
