Fix buffer overrun in raw_sbuf

This commit is contained in:
Tatsuhiro Tsujikawa 2014-08-06 01:49:36 +09:00
parent 3f212a60a5
commit 86b089f957
1 changed files with 4 additions and 1 deletions

View File

@ -105,7 +105,10 @@ typedef struct {
/* padding length for the current frame */ /* padding length for the current frame */
size_t padlen; size_t padlen;
nghttp2_inbound_state state; nghttp2_inbound_state state;
uint8_t raw_sbuf[8]; /* Small buffer. Currently the largest contiguous chunk to buffer
is frame header. We buffer part of payload, but they are smaller
than frame header. */
uint8_t raw_sbuf[NGHTTP2_FRAME_HDLEN];
} nghttp2_inbound_frame; } nghttp2_inbound_frame;
typedef struct { typedef struct {