Check port safety for AltSvc.

2019-08-01 03:19:38 +03:00 · 2019-08-01 03:19:38 +03:00 · 2c720730d7
parent 828eacba0b
commit 2c720730d7
1 changed files with 5 additions and 0 deletions
--- a/netwerk/protocol/http/AlternateServices.cpp
+++ b/netwerk/protocol/http/AlternateServices.cpp
@ -121,6 +121,11 @@ AltSvcMapping::ProcessHeader(const nsCString &buf, const nsCString &originScheme
      continue;
    }

+    if (NS_FAILED(NS_CheckPortSafety(portno, originScheme.get()))) {
+      LOG(("Alt Svc does not allow port %d, ignoring request", portno));
+      continue;
+    }
+
    // unescape modifies a c string in place, so afterwards
    // update nsCString length
    nsUnescape(npnToken.BeginWriting());