You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2019/10/17 19:20:01 UTC

[tomcat] branch 7.0.x updated: Fix possible NPE with excessive header size

This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 7.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/7.0.x by this push:
     new e7e2c73  Fix possible NPE with excessive header size
e7e2c73 is described below

commit e7e2c7327c03559d73749f32a1c733f6eeee55ce
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Thu Oct 17 20:19:45 2019 +0100

    Fix possible NPE with excessive header size
---
 java/org/apache/coyote/http11/AbstractHttp11Processor.java | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/java/org/apache/coyote/http11/AbstractHttp11Processor.java b/java/org/apache/coyote/http11/AbstractHttp11Processor.java
index 4bd7b3f..d2270aa 100644
--- a/java/org/apache/coyote/http11/AbstractHttp11Processor.java
+++ b/java/org/apache/coyote/http11/AbstractHttp11Processor.java
@@ -1755,7 +1755,10 @@ public abstract class AbstractHttp11Processor<S> extends AbstractProcessor<S> {
         Enumeration<String> values = headers.values(Constants.CONNECTION);
         Set<String> result = new HashSet<String>();
         while (values.hasMoreElements()) {
-            TokenList.parseTokenList(new StringReader(values.nextElement()), result);
+            String nextHeaderValue = values.nextElement();
+            if (nextHeaderValue != null) {
+                TokenList.parseTokenList(new StringReader(values.nextElement()), result);
+            }
         }
 
         return result.contains(token);


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org