6 ms·
Found the issue - a use after free in send_response() if I close the session early due to an error. Was continuing to the next bit. Put a temp fix in place, wil
by GSGBen 1y ago
Found the issue - a use after free in send_response() if I close the session early due to an error. Was continuing to the next bit. Put a temp fix in place, will push a proper one later.
- GSGBen 1y agoStill seems to have an issue, but no output before the crash. Will have to do some more debugging. Thanks for the test HN! Source is here btw: https://github.com/GSGBen/unsafehttp/blob/main/src/main.c https://github.com/GSGBen/unsafehttp/blob/main/src/main.c
- Retr0id 1y agohotfixing httpd UAFs is peak HN spirit :)