Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-15564

[GSS](7.1.z) UNDERTOW-1237 - MultipartParser doesn't properly handle multi-line headers

XMLWordPrintable

      According to section 2.2.3 of RFC2822, headers may be folded at a whitespace character with a CRLF. Currently, MultipartParser considers the CRLF the end of the header value in all cases rather than checking for a whitespace character that signals the continuation of the value. This results in a MalformedMessageException to be thrown from the headerName method when the currentString (which now contains the remainder of the value) is checked to ensure it is null.

      This behavior may be reproduced by simply creating a multi-line header for a request, for example:

      {{Content-Disposition: form-data;
      name="data";
      filename="foo"}}

              thofman Tomas Hofman
              rhn-support-aogburn Aaron Ogburn
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: