mirror of
https://github.com/nodejs/node.git
synced 2024-11-24 20:29:23 +01:00
2e92e5b71d
Reviewed-By: Matteo Collina <matteo.collina@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com> Reviewed-By: Vladimir de Turckheim <vlad2t@hotmail.com> PR-URL: #341 CVE-ID: CVE-2022-32213, CVE-2022-32215, CVE-2022-35256
84 lines
1.6 KiB
JavaScript
84 lines
1.6 KiB
JavaScript
'use strict';
|
|
|
|
const common = require('../common');
|
|
const assert = require('assert');
|
|
|
|
const http = require('http');
|
|
const net = require('net');
|
|
|
|
function serverHandler(server, msg) {
|
|
const client = net.connect(server.address().port, 'localhost');
|
|
|
|
let response = '';
|
|
|
|
client.on('data', common.mustCall((chunk) => {
|
|
response += chunk;
|
|
}));
|
|
|
|
client.setEncoding('utf8');
|
|
client.on('error', common.mustNotCall());
|
|
client.on('end', common.mustCall(() => {
|
|
assert.strictEqual(
|
|
response,
|
|
'HTTP/1.1 400 Bad Request\r\nConnection: close\r\n\r\n'
|
|
);
|
|
server.close();
|
|
}));
|
|
client.write(msg);
|
|
client.resume();
|
|
}
|
|
|
|
{
|
|
const msg = [
|
|
'GET / HTTP/1.1',
|
|
'Host: localhost',
|
|
'Dummy: x\nContent-Length: 23',
|
|
'',
|
|
'GET / HTTP/1.1',
|
|
'Dummy: GET /admin HTTP/1.1',
|
|
'Host: localhost',
|
|
'',
|
|
'',
|
|
].join('\r\n');
|
|
|
|
const server = http.createServer(common.mustNotCall());
|
|
|
|
server.listen(0, common.mustSucceed(serverHandler.bind(null, server, msg)));
|
|
}
|
|
|
|
{
|
|
const msg = [
|
|
'POST / HTTP/1.1',
|
|
'Host: localhost',
|
|
'x:x\nTransfer-Encoding: chunked',
|
|
'',
|
|
'1',
|
|
'A',
|
|
'0',
|
|
'',
|
|
'',
|
|
].join('\r\n');
|
|
|
|
const server = http.createServer(common.mustNotCall());
|
|
|
|
server.listen(0, common.mustSucceed(serverHandler.bind(null, server, msg)));
|
|
}
|
|
|
|
{
|
|
const msg = [
|
|
'POST / HTTP/1.1',
|
|
'Host: localhost',
|
|
'x:\nTransfer-Encoding: chunked',
|
|
'',
|
|
'1',
|
|
'A',
|
|
'0',
|
|
'',
|
|
'',
|
|
].join('\r\n');
|
|
|
|
const server = http.createServer(common.mustNotCall());
|
|
|
|
server.listen(0, common.mustSucceed(serverHandler.bind(null, server, msg)));
|
|
}
|