decc609085
Ramesh Adhikari
2026-07-31
Subject
h3-proxy: fix NULL deref when non-:status header arrives before :status
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
lib/vquic/cf-ngtcp2-proxy.c+3 -0
| @@ -431,6 +431,9 @@ static int cb_h3_proxy_recv_header(nghttp3_conn *conn, int64_t stream_id, | |
| pctx->tunnel.resp = resp; | |
| } | |
| else { | |
| + | if(!pctx->tunnel.resp) { |
| + | return NGHTTP3_ERR_CALLBACK_FAILURE; |
| + | } |
| /* store as an HTTP1-style header */ | |
| CURL_TRC_CF(data, cf, "[%" PRId64 "] header: %.*s: %.*s", stream_id, | |
| (int)h3name.len, h3name.base, (int)h3val.len, h3val.base); | |