commit 0adbbd328a93482b82c4e5d5650c5311212bf388
from: Omar Polo <op@omarpolo.com>
date: Wed May 28 17:36:27 2025 UTC

fix out of bounds

commit - a068a093ed454b5cfd537a6916f6b32c18a541b6
commit + 0adbbd328a93482b82c4e5d5650c5311212bf388
blob - ef857b1822420fd49de5f69449ded65e2f7e3e85
blob + 73b62a711d40c4e9f4ad9246203f93255949ce3e
--- gotwebd/fcgi.c
+++ gotwebd/fcgi.c
@@ -289,6 +289,7 @@ parse_cookie_hdr(struct request *c, char *hdr, size_t 
 		if (len > 8 && !strncmp(hdr, "gwdauth=", 8)) {
 			hdr += 8;
 			len -= 8;
+			l -= 8;
 
 			if (l < MAX_AUTH_COOKIE - 1) {
 				memcpy(c->auth_cookie, hdr, l);