Commit Diff
--- gotwebd/fcgi.c +++ gotwebd/fcgi.c @@ -289,6 +289,7 @@ parse_cookie_hdr(struct request *c, char *hdr, size_t if (len > 8 && !strncmp(hdr, "gwdauth=", 8)) { hdr += 8; len -= 8; + l -= 8; if (l < MAX_AUTH_COOKIE - 1) { memcpy(c->auth_cookie, hdr, l);