From faffe7c9a88bd2cde3f2d742daebad6e4c55195b Mon Sep 17 00:00:00 2001
From: Bram Matthys <syzop@vulnscan.org>
Date: Tue, 21 Jun 2022 17:56:25 +0200
Subject: [PATCH] Fix crash in webserver

---
 src/modules/webserver.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/modules/webserver.c b/src/modules/webserver.c
index 93a1aa7ee..c4b59cf7b 100644
--- a/src/modules/webserver.c
+++ b/src/modules/webserver.c
@@ -388,6 +388,9 @@ int webserver_handle_request_header(Client *client, const char *readbuf, int *le
 	     r;
 	     r = webserver_handshake_helper(NULL, 0, &key, &value, &lastloc, &end_of_request))
 	{
+		if (BadPtr(value))
+			continue; /* skip empty values */
+
 		if (!strcasecmp(key, "REQUEST"))
 		{
 			safe_strdup(WEB(client)->uri, value);