Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Leap:42.3:Update
aria2
aria2-CVE-2019-3500.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File aria2-CVE-2019-3500.patch of Package aria2
From 37368130ca7de5491a75fd18a20c5c5cc641824a Mon Sep 17 00:00:00 2001 From: Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> Date: Sat, 5 Jan 2019 09:32:40 +0900 Subject: [PATCH] Mask headers --- src/HttpConnection.cc | 18 ++++++++++++------ 1 file changed, 12 insertions(+), 6 deletions(-) Index: aria2-1.24.0/src/HttpConnection.cc =================================================================== --- aria2-1.24.0.orig/src/HttpConnection.cc +++ aria2-1.24.0/src/HttpConnection.cc @@ -97,11 +97,17 @@ std::string HttpConnection::eraseConfide std::string result; std::string line; while (getline(istr, line)) { - if (util::startsWith(line, "Authorization: Basic")) { - result += "Authorization: Basic ********\n"; + if (util::istartsWith(line, "Authorization: ")) { + result += "Authorization: <snip>\n"; } - else if (util::startsWith(line, "Proxy-Authorization: Basic")) { - result += "Proxy-Authorization: Basic ********\n"; + else if (util::istartsWith(line, "Proxy-Authorization: ")) { + result += "Proxy-Authorization: <snip>\n"; + } + else if (util::istartsWith(line, "Cookie: ")) { + result += "Cookie: <snip>\n"; + } + else if (util::istartsWith(line, "Set-Cookie: ")) { + result += "Set-Cookie: <snip>\n"; } else { result += line; @@ -149,8 +155,8 @@ std::unique_ptr<HttpResponse> HttpConnec const auto& proc = outstandingHttpRequests_.front()->getHttpHeaderProcessor(); if (proc->parse(socketRecvBuffer_->getBuffer(), socketRecvBuffer_->getBufferLength())) { - A2_LOG_INFO( - fmt(MSG_RECEIVE_RESPONSE, cuid_, proc->getHeaderString().c_str())); + A2_LOG_INFO(fmt(MSG_RECEIVE_RESPONSE, cuid_, + eraseConfidentialInfo(proc->getHeaderString()).c_str())); auto httpResponse = make_unique<HttpResponse>(); httpResponse->setCuid(cuid_); httpResponse->setHttpHeader(proc->getResult());
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor