libvncserver: fix NULL pointer dereferences in httpd proxy handlers
httpProcessInput() passes the return value of strchr() to atoi() and strncmp() without checking for NULL. If a CONNECT request contains no colon, or a GET request contains no slash, strchr() returns NULL, leading to a segmentation fault. Add NULL checks before using the strchr() return values.
K
Kazuma Matsumoto committed
dc78dee51a7e270e537a541a17befdf2073f5314
Parent: 9664466
Committed by Christian Beier <info@christianbeier.net>
on 3/20/2026, 5:37:13 PM