zephyr/subsys/net/lib
Matt Rodgers 989fdadfe2 net: lib: http_server: prevent falsely matching HTTP headers
Using strncasecmp to match HTTP headers can give unexpected results when
the strings to be compared match up until the end of one string, but the
other string contains additional characters. This can result in falsely
matching a HTTP header value, for example:

strncasecmp("Upgrade-Something", "Upgrade", sizeof("Upgrade") - 1) --> 0

In this case we know that both strings are NULL terminated since one is
a string literal and we have just length-checked and explicitly NULL
terminated the other. So we can just use strcasecmp without a max
length.

Signed-off-by: Matt Rodgers <mrodgers@witekio.com>
2024-09-02 12:33:03 -04:00
..
capture net: capture: enable capturing of IPv6/v4 only 2024-08-26 17:06:37 +02:00
coap net: coap: Parse more flag in coap_get_block2_option() 2024-08-02 22:12:47 -05:00
config net: config: add missing include 2024-08-21 16:44:06 -04:00
dhcpv4 net: dhcpv4_server: dns server option 2024-08-20 18:58:40 -04:00
dhcpv6
dns kconfig: replace known integer constants with variables 2024-07-27 20:49:15 +03:00
http net: lib: http_server: prevent falsely matching HTTP headers 2024-09-02 12:33:03 -04:00
lwm2m net: lwm2m: fix buffer size check for U16 resource 2024-09-02 12:32:50 -04:00
mqtt net: mqtt: improve decoder buffer handling 2024-07-31 13:08:28 +02:00
mqtt_sn kconfig: replace known integer constants with variables 2024-07-27 20:49:15 +03:00
ptp net: ptp: Properly handle second overflow/underflow 2024-08-06 09:17:26 +01:00
shell net: shell: cm: Fix snprintf warnings on NEWLIBC 2024-08-24 07:14:32 -04:00
sntp
sockets net: dns: Add more error codes to gai_strerror() 2024-09-02 12:32:22 -04:00
socks
tftp
tls_credentials net: lib: fix typo 2024-07-12 09:33:20 -04:00
trickle
utils
websocket net: websocket: fix undefined reference 2024-08-21 08:58:57 +02:00
zperf style: subsys: comply with MISRA C:2012 Rule 15.6 2024-08-20 10:33:51 +02:00
CMakeLists.txt net: ptp: Initial PTP library implementation 2024-06-13 05:40:41 -04:00
Kconfig net: ptp: Initial PTP library implementation 2024-06-13 05:40:41 -04:00