Skip to content

HttpListener's chunk size parsing could be more strict #132746

Description

@MihaZupan

_chunkSize = int.Parse(RemoveChunkExtension(_saved.ToString()), NumberStyles.HexNumber, CultureInfo.InvariantCulture);

This might eat whitespace instead of rejecting it.
This is a better check:

if (!Utf8Parser.TryParse(currentLine, out ulong chunkSize, out int bytesConsumed, 'X'))

Activity

  1. added this to the Future milestone on Aug 25, 2026
  2. dotnet-policy-service commented on Aug 25, 2026

    @dotnet-policy-service
    Contributor

    Tagging subscribers to this area: @karelz, @dotnet/ncl
    See info in area-owners.md if you want to be subscribed.

  3. modified the milestones: Future, 12.0.0 on Sep 1, 2026
  4. locked and limited conversation to collaborators on Oct 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions