| { | |
| "item_id": "ker-tinyhttp_hdr", | |
| "kernel": "tinyhttp_hdr", | |
| "advisory": "RUSTSEC-2020-0031", | |
| "crate": "tiny_http", | |
| "pre_version": "0.6.2", | |
| "post_version": "0.6.3", | |
| "advisory_url": "https://github.com/tiny-http/tiny-http/issues/173", | |
| "title": "HTTP Request smuggling through malformed Transfer Encoding headers", | |
| "source_file": "src/common.rs", | |
| "function": "header_field_ok", | |
| "signature": "pub fn header_field_ok(s: &[u8]) -> bool", | |
| "spec_doc": "A header field name is valid iff it is ASCII and contains no whitespace (no trimming: ' Transfer-Encoding' and 'Transfer-Encoding ' are invalid).", | |
| "bug_class": "logic", | |
| "fidelity": "verbatim_logic", | |
| "extraction_note": "src/common.rs HeaderField::from_str: trimmed whitespace (request smuggling)", | |
| "witness_args": "b\"Transfer-Encoding \"", | |
| "labels": { | |
| "buggy": "tiny_http@0.6.2", | |
| "reference": "tiny_http@0.6.3" | |
| } | |
| } |