CVSROOT: /cvs Module name: src Changes by: flor...@cvs.openbsd.org 2015/07/29 14:03:14
Modified files:
usr.sbin/httpd : httpd.h server.c server_fcgi.c server_http.c
Log message:
Read fcgi response records until we have the whole http header and can
parse it. Otherwise http headers can leak into the body.
Pointed out by Jean-Philippe Ouellet on bugs@ Thanks!
OK reyk, commit ASAP deraadt@
