From 3986ac186045a17f79d42084160fb57918814e73 Mon Sep 17 00:00:00 2001 From: Willy Tarreau Date: Fri, 8 May 2015 16:13:42 +0200 Subject: [PATCH] BUG/MEDIUM: http: fix the http-request capture parser Due to the code being mostly inspired from the tcp-request parser, it does some crap because both don't work the same way. The "len" argument could be mismatched and then the length could be used uninitialized. --- src/proto_http.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/proto_http.c b/src/proto_http.c index 275f32900..957640ece 100644 --- a/src/proto_http.c +++ b/src/proto_http.c @@ -12163,7 +12163,7 @@ int parse_http_req_capture(const char **args, int *orig_arg, struct proxy *px, s struct sample_expr *expr; struct cap_hdr *hdr; int cur_arg; - int len; + int len = 0; for (cur_arg = *orig_arg; cur_arg < *orig_arg + 3 && *args[cur_arg]; cur_arg++) if (strcmp(args[cur_arg], "if") == 0 ||