[Bug 244123] libfetch: memory leak when processing multiple HTTP location response headers

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=244123

--- Comment #3 from Hans Christian Woithe <chwoithe at yahoo.com> ---
Duplicate headers can be allowed in certain situations.  I tend to agree that
the location header probably doesn't qualify.

https://tools.ietf.org/html/rfc7230#section-3.2.2

A generic fix would involve a larger change on how headers are processed.  Such
a change should detect all duplicate headers that aren't allowed and return an
appropriate error to the user.  That could eliminate the need for the code
under scrutiny.

-- 
You are receiving this mail because:
You are the assignee for the bug.