{
 "item_id": "ker-tinyhttp_hdr",
 "kernel": "tinyhttp_hdr",
 "advisory": "RUSTSEC-2020-0031",
 "crate": "tiny_http",
 "pre_version": "0.6.2",
 "post_version": "0.6.3",
 "advisory_url": "https://github.com/tiny-http/tiny-http/issues/173",
 "title": "HTTP Request smuggling through malformed Transfer Encoding headers",
 "source_file": "src/common.rs",
 "function": "header_field_ok",
 "signature": "pub fn header_field_ok(s: &[u8]) -> bool",
 "spec_doc": "A header field name is valid iff it is ASCII and contains no whitespace (no trimming: ' Transfer-Encoding' and 'Transfer-Encoding ' are invalid).",
 "bug_class": "logic",
 "fidelity": "verbatim_logic",
 "extraction_note": "src/common.rs HeaderField::from_str: trimmed whitespace (request smuggling)",
 "witness_args": "b\"Transfer-Encoding \"",
 "labels": {
  "buggy": "tiny_http@0.6.2",
  "reference": "tiny_http@0.6.3"
 }
}