feedc0de/boost_beast
1
0
Fork 0
forked from boostorg/beast
Code Pull Requests Activity

Large WebSocket Upgrade response no longer overflows

Browse Source 
fix #1460
This commit is contained in:
Vinnie Falco
2019-02-20 18:58:59 -08:00
parent 9c83a9c6e7
commit c681241d70
3 changed files with 191 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/beast/websocket/handshake.cpp
+95
View File
@@ -17,6 +17,7 @@
#include <boost/asio/io_context.hpp>
#include <boost/asio/strand.hpp>
#include <thread>
namespace boost {
namespace beast {
@@ -609,6 +610,99 @@ public:
}
}
// https://github.com/boostorg/beast/issues/1460
void
testIssue1460()
{
net::io_context ioc;
auto const make_big = [](response_type& res)
{
res.insert("Date", "Mon, 18 Feb 2019 12:48:36 GMT");
res.insert("Set-Cookie",
"__cfduid=de1e209833e7f05aaa1044c6d448994761550494116; "
"expires=Tue, 18-Feb-20 12:48:36 GMT; path=/; domain=.cryptofacilities.com; HttpOnly; Secure");
res.insert("Feature-Policy",
"accelerometer 'none'; ambient-light-sensor 'none'; "
"animations 'none'; autoplay 'none'; camera 'none'; document-write 'none'; "
"encrypted-media 'none'; geolocation 'none'; gyroscope 'none'; legacy-image-formats 'none'; "
"magnetometer 'none'; max-downscaling-image 'none'; microphone 'none'; midi 'none'; "
"payment 'none'; picture-in-picture 'none'; unsized-media 'none'; usb 'none'; vr 'none'");
res.insert("Referrer-Policy", "origin");
res.insert("Strict-Transport-Security", "max-age=15552000; includeSubDomains; preload");
res.insert("X-Content-Type-Options", "nosniff");
res.insert("Content-Security-Policy",
"default-src 'none'; manifest-src 'self'; object-src 'self'; "
"child-src 'self' https://www.google.com; "
"font-src 'self' https://use.typekit.net https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com data:; "
"script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.cloudflare.com https://use.typekit.net "
"https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com "
"https://googleads.g.doubleclick.net https://www.gstatic.com; connect-src 'self' wss://*.cryptofacilities.com/ws/v1 wss://*.cryptofacilities.com/ws/indices "
"https://uat.cryptofacilities.com https://uat.cf0.io wss://*.cf0.io https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com "
"https://fonts.googleapis.com https://google-analytics.com https://use.typekit.net https://p.typekit.net https://fonts.gstatic.com https://www.gstatic.com "
"https://chart.googleapis.com; worker-src 'self'; img-src 'self' https://chart.googleapis.com https://p.typekit.net https://www.google.co.uk https://www.google.com "
"https://www.google-analytics.com https://stats.g.doubleclick.net data:; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net "
"https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com");
res.insert("X-Frame-Options", "SAMEORIGIN");
res.insert("X-Xss-Protection", "1; mode=block");
res.insert("Expect-CT", "max-age=604800, report-uri=\"https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct\"");
res.insert("Server", "cloudflare");
res.insert("CF-RAY", "4ab09be1a9d0cb06-ARN");
res.insert("Bulk",
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************"
"****************************************************************************************************");
};
{
stream<test::stream> ws1(ioc);
stream<test::stream> ws2(ioc);
test::connect(ws1.next_layer(), ws2.next_layer());
ws2.set_option(stream_base::decorator(make_big));
error_code ec;
ws2.async_accept(test::success_handler());
std::thread t(
[&ioc]
{
ioc.run();
ioc.restart();
});
ws1.handshake("test", "/", ec);
BEAST_EXPECTS(! ec, ec.message());
t.join();
}
{
stream<test::stream> ws1(ioc);
stream<test::stream> ws2(ioc);
test::connect(ws1.next_layer(), ws2.next_layer());
ws2.set_option(stream_base::decorator(make_big));
error_code ec;
ws2.async_accept(test::success_handler());
ws1.async_handshake("test", "/", test::success_handler());
ioc.run();
ioc.restart();
}
}
void
run() override
{
@@ -618,6 +712,7 @@ public:
testExtNegotiate();
testMoveOnly();
testAsync();
testIssue1460();
}
};