Benedek Brandschott b33745d104 fix(esp_http_server): report truncation when header value length matches buffer size ...

httpd_req_get_hdr_value_str() detected truncation with `val_size < full_size`, where full_size is the strlcpy() return value. strlcpy() returns strlen() of the source (the terminating null is not counted), so truncation actually occurs when strlen(src) >= val_size. At strlen(src) == val_size the value is copied as val_size - 1 chars + NUL (i.e. truncated) yet ESP_OK was returned, so the caller never learned the value was cut.

Use `val_size <= full_size` and correct the misleading comment about strlcpy()'s return value.

Same truncation-reporting class fixed for httpd_cookie_key_value in PR #16202; httpd_req_get_hdr_value_str was missed. No memory-safety impact: strlcpy() null-terminates if val_size > 0.

2026-07-01 10:20:19 +08:00

..

include

feat(httpd): add httpd_req_get_hdr_value_str_ptr() to avoid value copy

2026-06-16 17:59:54 +08:00

src

fix(esp_http_server): report truncation when header value length matches buffer size

2026-07-01 10:20:19 +08:00

test_apps

Merge branch 'contrib/github_pr_18684' into 'master'

2026-06-30 18:15:48 +05:30

CMakeLists.txt

feat(esp_common): implement composable error code registration via link-time arrays

2026-05-28 09:53:32 +02:00

Kconfig

fix(ws): enforce RFC 6455 §4.2.1 handshake requirements

2026-06-22 14:05:34 +08:00