httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 48359] Buffer overflow related to setting RequestHeader
Date Mon, 01 Mar 2010 01:44:42 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=48359

--- Comment #17 from Graham Leggett <minfrin@sharp.fm> 2010-03-01 01:44:37 UTC ---
The old code seems to have arbitrarily chosen to sometimes copy the input
headers, and sometimes not, entirely arbitrarily from the point of view of a
module. From what I can see, any module that depended on being able to
manipulate main request headers by fiddling with subrequest headers is not only
broken but likely to suffer inconsistent behaviour depending on the request. +1
to wrowe's patch.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message