tree 6b925f75f2c3f73319e121f6debc4d74b5e10696
parent 401ba23732e9ae96c3e4797eb624d357cb9ae2d0
author Mark Thomas <markt@apache.org> 1391681664 +0000
committer Mark Thomas <markt@apache.org> 1391681664 +0000

Fix CVE-2014-0050. Specially crafted input can trigger a DoS if the buffer used by the <code>MultipartStream</code> is not big enough. When constructing <code>MultipartStream</code> enforce the requirements for buffer size by throwing an <code>IllegalArgumentException</code> if the requested buffer size is too small. This prevents the DoS.

git-svn-id: https://svn.apache.org/repos/asf/commons/proper/fileupload/trunk@1565143 13f79535-47bb-0310-9956-ffa450edef68