Linus Groh 6bce48e99b LibWeb: Fix UAF in convert_header_names_to_a_sorted_lowercase_set() ...

We can't keep a span (ReadonlyBytes) to a move()'d ByteBuffer
in the header_names_seen HashTable - copy the original name span instead
which works the same thanks to CaseInsensitiveBytesTraits.

This would sporadically fail the contains() check due to garbage data,
later leading to a VERIFY() crash in the OrderedHashTable append loop.

2023-02-11 13:14:26 +00:00

..

Bodies.cpp

LibJS+Everywhere: Propagate Cell::initialize errors from Heap::allocate

2023-01-29 00:02:45 +00:00

Bodies.h

LibWeb: Add missing GCPtr.h includes to Fetch headers

2023-02-10 13:53:45 +00:00

Headers.cpp

LibWeb: Fix UAF in convert_header_names_to_a_sorted_lowercase_set()

2023-02-11 13:14:26 +00:00

Headers.h

LibWeb: Make extract_header_list_values differentiate parsing failures

2023-02-10 22:18:19 +00:00

Methods.cpp

…

Methods.h

…

Requests.cpp

LibJS: Convert Heap::allocate{,_without_realm}() to NonnullGCPtr

2022-12-15 06:56:37 -05:00

Requests.h

LibWeb: Add missing GCPtr.h includes to Fetch headers

2023-02-10 13:53:45 +00:00

Responses.cpp

LibWeb: Make extract_header_list_values differentiate parsing failures

2023-02-10 22:18:19 +00:00

Responses.h

LibWeb: Add missing GCPtr.h includes to Fetch headers

2023-02-10 13:53:45 +00:00

Statuses.cpp

…

Statuses.h

…