Re: [dev] [quark] one byte stack overflow

2018-07-16 Thread Laslo Hunhold
On Mon, 16 Jul 2018 13:35:14 -0700 Aaron Burrow wrote: Hey Aaron, > quark has a 1 byte NULL stack overflow triggered by an HTTP request > for a folder path not ending with '/' and having length PATH_MAX-1. > Relevant code from http.c:http_send_response() > > if (S_ISDIR(st.st_mode)) { >

[dev] [quark] one byte stack overflow

2018-07-16 Thread Aaron Burrow
quark has a 1 byte NULL stack overflow triggered by an HTTP request for a folder path not ending with '/' and having length PATH_MAX-1. Relevant code from http.c:http_send_response() if (S_ISDIR(st.st_mode)) { /* add / to target if not present */ len = strlen(realtarget);