From ffecd64669d812ade93bb21ef7d8edcd31fc4ff3 Mon Sep 17 00:00:00 2001 From: benoitc Date: Fri, 25 May 2012 12:27:01 +0200 Subject: [PATCH] don't finish the loop if the headers length is too big --- gunicorn/http/message.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/gunicorn/http/message.py b/gunicorn/http/message.py index 87f0f3a4..4f7dfe5a 100644 --- a/gunicorn/http/message.py +++ b/gunicorn/http/message.py @@ -81,6 +81,9 @@ class Message(object): while len(lines) and lines[0].startswith((" ", "\t")): curr = lines.pop(0) header_length += len(curr) + if header_length > self.limit_request_field_size > 0: + raise LimitRequestHeaders("limit request headers " + + "fields size") value.append(curr) value = ''.join(value).rstrip()