Critical Description
There is a bug in HttpResponse::readChunkedContent that prevents it to stop reading content when it exceeds the maximum allowed size.
There is a variable contentBytesRead that is used to check how much content has been read, but it is never updated, so it always stays null, and the size check always returns false (unless a single chunk is larger than the maximum allowed content size).
This allows any server to cause out-of-memory errors on our size.
Attachments
Issue Links
- links to