src: make Sec-WebSocket-Key check case-insensitive

Current case sensitive comparison is breaking netty-based WS clients.
replace strncmp with strncasecmp
Fixes: #7247
PR-URL: #7248
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Ali Ijaz Sheikh <ofrobots@google.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>

Author: MylesBorins

src/inspector_socket.cc

@@ -1,4 +1,6 @@
 #include"inspector_socket.h"
+#include"util.h"
+#include"util-inl.h"
 
 #defineNODE_WANT_INTERNALS1
 #include"base64.h"
@@ -445,9 +447,10 @@ static int header_value_cb(http_parser* parser, const char* at, size_t length) {
 structhttp_parsing_state_s* state = (structhttp_parsing_state_s*)
  (reinterpret_cast<inspector_socket_t*>(parser->data))->http_parsing_state;
  state->parsing_value = true;
-if (state->current_header && strncmp(state->current_header,
-SEC_WEBSOCKET_KEY_HEADER,
-sizeof(SEC_WEBSOCKET_KEY_HEADER)) == 0) {
+if (state->current_header &&
+node::StringEqualNoCaseN(state->current_header,
+SEC_WEBSOCKET_KEY_HEADER,
+sizeof(SEC_WEBSOCKET_KEY_HEADER))) {
 append(&state->ws_key, at, length);
  }
 return0;

src/util-inl.h

@@ -219,6 +219,16 @@ bool StringEqualNoCase(const char* a, const char* b) {
 returnfalse;
 }
 
+boolStringEqualNoCaseN(constchar* a, constchar* b, size_t length) {
+for (size_t i = 0; i < length; i++) {
+if (ToLower(a[i]) != ToLower(b[i]))
+returnfalse;
+if (a[i] == '\0')
+returntrue;
+ }
+returntrue;
+}
+
 } // namespace node
 
 #endif// defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS

src/util.h

@@ -206,6 +206,9 @@ inline char ToLower(char c);
 // strcasecmp() is locale-sensitive. Use StringEqualNoCase() instead.
 inlineboolStringEqualNoCase(constchar* a, constchar* b);
 
+// strncasecmp() is locale-sensitive. Use StringEqualNoCaseN() instead.
+inlineboolStringEqualNoCaseN(constchar* a, constchar* b, size_t length);
+
 // Allocates an array of member type T. For up to kStackStorageSize items,
 // the stack is used, otherwise malloc().
 template <typename T, size_tkStackStorageSize = 1024>

test/cctest/util.cc

@@ -68,6 +68,21 @@ TEST(UtilTest, StringEqualNoCase) {
 EXPECT_FALSE(StringEqualNoCase("equals", "equal"));
 }
 
+TEST(UtilTest, StringEqualNoCaseN) {
+using node::StringEqualNoCaseN;
+EXPECT_FALSE(StringEqualNoCaseN("a", "b", strlen("a")));
+EXPECT_TRUE(StringEqualNoCaseN("", "", strlen("")));
+EXPECT_TRUE(StringEqualNoCaseN("equal", "equal", strlen("equal")));
+EXPECT_TRUE(StringEqualNoCaseN("equal", "EQUAL", strlen("equal")));
+EXPECT_TRUE(StringEqualNoCaseN("EQUAL", "EQUAL", strlen("equal")));
+EXPECT_TRUE(StringEqualNoCaseN("equal", "equals", strlen("equal")));
+EXPECT_FALSE(StringEqualNoCaseN("equal", "equals", strlen("equals")));
+EXPECT_TRUE(StringEqualNoCaseN("equals", "equal", strlen("equal")));
+EXPECT_FALSE(StringEqualNoCaseN("equals", "equal", strlen("equals")));
+EXPECT_TRUE(StringEqualNoCaseN("abc\0abc", "abc\0efg", strlen("abcdefgh")));
+EXPECT_FALSE(StringEqualNoCaseN("abc\0abc", "abcd\0efg", strlen("abcdefgh")));
+}
+
 TEST(UtilTest, ToLower) {
 using node::ToLower;
 EXPECT_EQ('0', ToLower('0'));