------------------------------------------------------------ revno: 13239 revision-id: squid3@treenet.co.nz-20160508124218-6vhq4icj0fwu5aof parent: squid3@treenet.co.nz-20160506094614-zyjq1i8ym2gcvwbu fixes bug: http://bugs.squid-cache.org/show_bug.cgi?id=4515 committer: Amos Jeffries branch nick: 3.4 timestamp: Mon 2016-05-09 00:42:18 +1200 message: Bug 4515: regression after CVE-2016-4554 patch ------------------------------------------------------------ # Bazaar merge directive format 2 (Bazaar 0.90) # revision_id: squid3@treenet.co.nz-20160508124218-6vhq4icj0fwu5aof # target_branch: http://bzr.squid-cache.org/bzr/squid3/3.4 # testament_sha1: 41116e273d27c1353b02457a2a719251c1a4551c # timestamp: 2016-05-08 12:50:09 +0000 # source_branch: http://bzr.squid-cache.org/bzr/squid3/3.4 # base_revision_id: squid3@treenet.co.nz-20160506094614-\ # zyjq1i8ym2gcvwbu # # Begin patch === modified file 'src/mime_header.cc' --- src/mime_header.cc 2016-05-02 03:42:53 +0000 +++ src/mime_header.cc 2016-05-08 12:42:18 +0000 @@ -58,10 +58,13 @@ debugs(25, 5, "mime_get_header: looking for '" << name << "'"); - for (p = mime; *p; p += strcspn(p, "\n\r")) { - if (strcmp(p, "\r\n\r\n") == 0 || strcmp(p, "\n\n") == 0) + for (p = mime; *p; p += strcspn(p, "\n")) { + if (strcmp(p, "\n\r\n") == 0 || strcmp(p, "\n\n") == 0) return NULL; + if (*p == '\n') + ++p; + if (strncasecmp(p, name, namelen)) continue;