Changeset 11130 in ntrip for trunk/BNC/src/bncnetqueryrtp.cpp

Timestamp:

Oct 28, 2026, 9:32:30 AM (10 days ago)

Author:

stuerze

Message:

Some fixes from security point of view

File:

• trunk/BNC/src/bncnetqueryrtp.cpp (modified) (3 diffs)

trunk/BNC/src/bncnetqueryrtp.cpp

@@ -110 +110 @@
 
   const int timeOut = 5000;
+  const int maxHeaderLines = 100; // of an RTSP answer
 
   _status = running;
@@ -177 +178 @@
         QByteArray serverPort;
         QString line = in.readLine();
-        while (!line.isEmpty()) {
+        int nLines = 0;
+        while (!line.isEmpty() && ++nLines <= maxHeaderLines) {
           if (line.indexOf("Session:") == 0) {
             _session = line.mid(9).toLatin1();
@@ -226 +228 @@
               QTextStream in(_socket);
               line = in.readLine();
-              while (!line.isEmpty()) {
+              nLines = 0;
+              while (!line.isEmpty() && ++nLines <= maxHeaderLines) {
                 if (line.indexOf("200 OK") != -1) {
                   emit newMessage(_url.toEncoded(QUrl::RemoveUserInfo).replace(0,1,"")