mirror of https://github.com/omar-polo/gmid.git
762d824cb1
Some particularly crafted IRIs can cause a denial of service (DOS). IRIs which have a trailing `..' segment and resolve to a valid IRI (i.e. a .. that's not escaping the root directory) will make the server process loop forever. This is """just""" an DOS vulnerability, it doesn't expose anything sensitive or give an attacker anything else. |
||
|---|---|---|
| .. | ||
| Makefile | ||
| env | ||
| err | ||
| fill-file.c | ||
| hello | ||
| invalid | ||
| iri_test.c | ||
| puny-test.c | ||
| runtime | ||
| serve-bigfile | ||
| sha | ||
| slow | ||
| valid.ext | ||