nodejs
diff --git a/‎lib/_http_common.js‎
Lines changed: 4 additions & 2 deletions b/‎lib/_http_common.js‎
Lines changed: 4 additions & 2 deletions
diff --git a/‎test/parallel/test-http-rawheaders-limit.js‎
Lines changed: 26 additions & 0 deletions b/‎test/parallel/test-http-rawheaders-limit.js‎
Lines changed: 26 additions & 0 deletions
@@ -59,9 +59,11 @@ const MAX_HEADER_PAIRS = 2000;
 // called to process trailing HTTP headers.
 function parserOnHeaders(headers, url) {
   // Once we exceeded headers limit - stop collecting them
-  if (this.maxHeaderPairs <= 0 ||
-      this._headers.length < this.maxHeaderPairs) {
+  const capacity = this.maxHeaderPairs - this._headers.length;
+  if (this.maxHeaderPairs <= 0 || capacity >= headers.length) {
     this._headers.push(...headers);
+  } else if (capacity > 0) {
+    this._headers.push(...headers.slice(0, capacity));
   }
   this._url += url;
 }
 
@@ -0,0 +1,26 @@
+'use strict';
+const common = require('../common');
+const assert = require('assert');
+const http = require('http');
+const net = require('net');
+
+const server = http.createServer(common.mustCall((req, res) => {
+  const limit = server.maxHeadersCount * 2;
+  assert.ok(req.rawHeaders.length <= limit,
+            `rawHeaders.length (${req.rawHeaders.length}) exceeds limit (${limit})`);
+  res.end();
+  server.close();
+}));
+
+server.maxHeadersCount = 50;
+
+server.listen(0, common.mustCall(() => {
+  const port = server.address().port;
+  const headers = Array.from({ length: 65 }, (_, i) => `X-${i}:v`).join('\r\n');
+  const req = `GET / HTTP/1.1\r\nHost: localhost\r\n${headers}\r\n\r\n`;
+
+  net.createConnection(port, 'localhost', function() {
+    this.write(req);
+    this.once('data', () => this.end());
+  });
+}));
Original file line number	Diff line number	Diff line change
@@ -59,9 +59,11 @@ const MAX_HEADER_PAIRS = 2000;
59	59	// called to process trailing HTTP headers.
60	60	function parserOnHeaders(headers, url) {
61	61	// Once we exceeded headers limit - stop collecting them
62		- if (this.maxHeaderPairs <= 0 \|\|
63		- this._headers.length < this.maxHeaderPairs) {
	62	+ const capacity = this.maxHeaderPairs - this._headers.length;
	63	+ if (this.maxHeaderPairs <= 0 \|\| capacity >= headers.length) {
64	64	this._headers.push(...headers);
	65	+ } else if (capacity > 0) {
	66	+ this._headers.push(...headers.slice(0, capacity));
65	67	}
66	68	this._url += url;
67	69	}