From fa5a4a994af984b93d269b43fca042cca030cea2 Mon Sep 17 00:00:00 2001
From: Philippe Antoine <pantoine@oisf.net>
Date: Tue, 6 Jan 2026 21:55:41 +0100
Subject: [PATCH] http: limit the number of folded lines per header

Ticket: 8201

Limits the quadratic complexity if each packet, restarting the
header parsing, just adds a new folded line.
This was previously bounded by the configurable max header length
---
 rust/htp/src/headers.rs | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/rust/htp/src/headers.rs b/rust/htp/src/headers.rs
index 9c2744c7d2..8276f7d695 100644
--- a/rust/htp/src/headers.rs
+++ b/rust/htp/src/headers.rs
@@ -289,6 +289,9 @@ impl Parser {
         }
     }
 
+    // limits quadratic complexity when each new packet just keeps adding a folded line
+    const MAX_NB_FOLD : u8 = 128;
+
     /// Parse a complete header value, including any folded headers
     fn value(&self) -> impl Fn(&[u8]) -> IResult<&[u8], Value> + '_ {
         move |input| {
@@ -298,6 +301,7 @@ impl Parser {
             if let Some(fold) = fold {
                 let mut i = rest;
                 let mut ofold = fold;
+                let mut nbfold = 0u8;
                 loop {
                     if self.side == Side::Response {
                         // Peek ahead for ambiguous name with lws vs. value with folding
@@ -340,7 +344,10 @@ impl Parser {
                         // eol empty fold double eol is enfo of headers
                         rest = rest2;
                     }
-                    if let Some(fold) = fold {
+                    nbfold += 1;
+                    if nbfold >= Self::MAX_NB_FOLD {
+                        return Ok((rest, Value::new(&value, flags)));
+                    } else if let Some(fold) = fold {
                         ofold = fold;
                     } else {
                         return Ok((rest, Value::new(&value, flags)));