HTTP parser: restricting control chars in header fields values.
This also fixes an infinite loop here (found with honggfuzz).
@@ -650,10 +650,8 @@ nxt_http_parse_field_value(nxt_http_request_parse_t *rp, u_char **pos,
break;
}
- if (ch == '\0') {
return NXT_HTTP_PARSE_INVALID;
}
- }
if (nxt_fast_path(p != *pos)) {
while (p[-1] == ' ') {
