Closed
Description
The Set-Cookie: header might carry any combination of characters. In case a consecutive sequence of semicolons ";;" is encountered, the client will crash because of this code:
Client termination when encountering such headers is not desired and might result in a denial of service.