3 ms·
From the description, it allocates a buffer based on Content-Length, but copies the size of the buffer it received, thus writing out of bounds of the allocation
by dwattttt 3y ago
From the description, it allocates a buffer based on Content-Length, but copies the size of the buffer it received, thus writing out of bounds of the allocation.