From 2fd8fe919bfc0269f4dcf50f2e13fb12b47d5ef4 Mon Sep 17 00:00:00 2001 From: Solderpunk Date: Sun, 31 May 2020 18:33:32 +0200 Subject: [PATCH] Do not read more than the maximum number of bytes in a valid response header. --- av98.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/av98.py b/av98.py index 4666780..9ef7c5c 100755 --- a/av98.py +++ b/av98.py @@ -365,9 +365,9 @@ you'll be able to transparently follow links to Gopherspace!""") else: address, f = self._send_request(gi) - # Spec dictates should not exceed 1024 bytes - # but does not dictate a total maximum header length. - header = f.readline(2048) + # Spec dictates should not exceed 1024 bytes, + # so maximum valid header length is 1027 bytes. + header = f.readline(1027) header = header.decode("UTF-8") if not header or header[-1] != '\n': raise RuntimeError("Received invalid header from server!")