Re: [FFmpeg-devel] [PATCH 3/3] http: fix potentially dangerous whitespace skipping code

2018-03-16 Thread Paul B Mahol
On 3/8/18, wm4 wrote: > If the string consists entirely of whitespace, this could in theory > continue to write '\0' before the start of the memory allocation. In > practice, it didn't really happen: the generic HTTP header parsing code > already skips leading whitespaces, so the string is either

[FFmpeg-devel] [PATCH 3/3] http: fix potentially dangerous whitespace skipping code

2018-03-07 Thread wm4
If the string consists entirely of whitespace, this could in theory continue to write '\0' before the start of the memory allocation. In practice, it didn't really happen: the generic HTTP header parsing code already skips leading whitespaces, so the string is either empty, or consists a non-whites