Index: net/http/http_response_headers.cc |
=================================================================== |
--- net/http/http_response_headers.cc (revision 255461) |
+++ net/http/http_response_headers.cc (working copy) |
@@ -1431,7 +1431,8 @@ |
// space following it are always |kVersionSize| characters. E.g., |
// 'Via: 1.1 Chrome-Compression-Proxy' |
while (EnumerateHeader(&iter, "via", &value)) { |
- if (!value.compare(kVersionSize, value_len, kChromeProxyViaValue)) |
+ if (value.size() >= kVersionSize + value_len && |
+ !value.compare(kVersionSize, value_len, kChromeProxyViaValue)) |
return true; |
} |