1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-05-31 07:48:11 +00:00
serenity/Userland/Libraries/LibWeb/Fetch/Infrastructure/HTTP
Linus Groh 6bce48e99b LibWeb: Fix UAF in convert_header_names_to_a_sorted_lowercase_set()
We can't keep a span (ReadonlyBytes) to a move()'d ByteBuffer
in the header_names_seen HashTable - copy the original name span instead
which works the same thanks to CaseInsensitiveBytesTraits.

This would sporadically fail the contains() check due to garbage data,
later leading to a VERIFY() crash in the OrderedHashTable append loop.
2023-02-11 13:14:26 +00:00
..
Bodies.cpp LibJS+Everywhere: Propagate Cell::initialize errors from Heap::allocate 2023-01-29 00:02:45 +00:00
Bodies.h LibWeb: Add missing GCPtr.h includes to Fetch headers 2023-02-10 13:53:45 +00:00
Headers.cpp LibWeb: Fix UAF in convert_header_names_to_a_sorted_lowercase_set() 2023-02-11 13:14:26 +00:00
Headers.h LibWeb: Make extract_header_list_values differentiate parsing failures 2023-02-10 22:18:19 +00:00
Methods.cpp LibWeb: Move Fetch infra into the Web::Fetch::Infrastructure namespace 2022-07-19 00:27:35 +01:00
Methods.h LibWeb: Move Fetch infra into the Web::Fetch::Infrastructure namespace 2022-07-19 00:27:35 +01:00
Requests.cpp LibJS: Convert Heap::allocate{,_without_realm}() to NonnullGCPtr 2022-12-15 06:56:37 -05:00
Requests.h LibWeb: Add missing GCPtr.h includes to Fetch headers 2023-02-10 13:53:45 +00:00
Responses.cpp LibWeb: Make extract_header_list_values differentiate parsing failures 2023-02-10 22:18:19 +00:00
Responses.h LibWeb: Add missing GCPtr.h includes to Fetch headers 2023-02-10 13:53:45 +00:00
Statuses.cpp LibWeb: Move Fetch infra into the Web::Fetch::Infrastructure namespace 2022-07-19 00:27:35 +01:00
Statuses.h LibWeb: Move Fetch infra into the Web::Fetch::Infrastructure namespace 2022-07-19 00:27:35 +01:00