diff options
| author | Wladimir J. van der Laan <[email protected]> | 2015-10-21 11:19:13 +0200 |
|---|---|---|
| committer | Wladimir J. van der Laan <[email protected]> | 2015-10-21 11:19:25 +0200 |
| commit | 0fbfc5106cd9866325b4a1ab3b9db8e91e54f070 (patch) | |
| tree | e6230f51d9d6f753b6d1f8242fa3ef70cdd9330a /src/httpserver.cpp | |
| parent | Merge pull request #6722 (diff) | |
| parent | http: Restrict maximum size of request line + headers (diff) | |
| download | discoin-0fbfc5106cd9866325b4a1ab3b9db8e91e54f070.tar.xz discoin-0fbfc5106cd9866325b4a1ab3b9db8e91e54f070.zip | |
Merge pull request #6859
41db8c4 http: Restrict maximum size of request line + headers (Wladimir J. van der Laan)
Diffstat (limited to 'src/httpserver.cpp')
| -rw-r--r-- | src/httpserver.cpp | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/httpserver.cpp b/src/httpserver.cpp index 0a7f903e9..8698abb90 100644 --- a/src/httpserver.cpp +++ b/src/httpserver.cpp @@ -38,6 +38,9 @@ #include <boost/foreach.hpp> #include <boost/scoped_ptr.hpp> +/** Maximum size of http request (request line + headers) */ +static const size_t MAX_HEADERS_SIZE = 8192; + /** HTTP request work item */ class HTTPWorkItem : public HTTPClosure { @@ -414,6 +417,7 @@ bool InitHTTPServer() } evhttp_set_timeout(http, GetArg("-rpcservertimeout", DEFAULT_HTTP_SERVER_TIMEOUT)); + evhttp_set_max_headers_size(http, MAX_HEADERS_SIZE); evhttp_set_max_body_size(http, MAX_SIZE); evhttp_set_gencb(http, http_request_cb, NULL); |