apr-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Bojan Smojver <bo...@rexursive.com>
Subject Re: Bugs discovered by a research group at CWRU (2)
Date Thu, 20 Aug 2009 05:35:53 GMT
On Thu, 2009-08-20 at 01:08 -0400, Gang Shu wrote:
> 3. Analyzed bug-fix: 46425
> 
> (https://issues.apache.org/bugzilla/show_bug.cgi?id=46425)

> The comment of this bug-fix is as follows:
> 
> “apr should set FD_CLOEXEC if APR_FOPEN_NOCLEANUP is not set. This
> would in general help with security and fix some existing issues with
> third party httpd modules. Patches by Stefan Fritsch.”

Please elaborate on this. What you are you proposing here?

-- 
Bojan


Mime
View raw message