SIGN IN SIGN UP

libvncserver: fix NULL pointer dereferences in httpd proxy handlers

httpProcessInput() passes the return value of strchr() to atoi()
and strncmp() without checking for NULL. If a CONNECT request
contains no colon, or a GET request contains no slash, strchr()
returns NULL, leading to a segmentation fault.

Add NULL checks before using the strchr() return values.
K
Kazuma Matsumoto committed
dc78dee51a7e270e537a541a17befdf2073f5314
Parent: 9664466
Committed by Christian Beier <info@christianbeier.net> on 3/20/2026, 5:37:13 PM