Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
Date: Sun, 23 Jun 2002 17:27:49 +0300
From: "Zvi Har'El" <rl@math.technion.ac.il>
To: bugzilla@redhat.com
Cc: Apache Developer List <dev@httpd.apache.org>
Subject: Re: [RHSA-2002:103-13] Updated Apache packages fix chunked encoding
 issue
Message-ID: <20020623142749.GB4264@fermat.math.technion.ac.il>
References: <200206192357.g5JNvPo19460@porkchop.devel.redhat.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <200206192357.g5JNvPo19460@porkchop.devel.redhat.com>
User-Agent: Mutt/1.3.99i
Hebrew-Date: 13 Tammuz 5762

On Wed, 19 Jun 2002 19:57:00 -0400, bugzilla@redhat.com wrote about "[RHSA-2002:103-13] Updated Apache packages fix chunked encoding issue":
> We have backported the security fix from the official Apache 1.3.26
> release. This should help minimize the impact of upgrading to our errata
> packages.

Hi,

Since you have backported apache's implementation for ap_strtol, does this mean
you suspect glibc's strtol? I believe the latter sets ERANGE correctly,
therefore the whole business of replacing strtol by ap_strtol everywhere doen't
make sense. The only real fix is the patch of http_protocol.c, where *atol* is
replaced by strtol. (of course redhats' apache_1.3.23-chunky.patch does other,
unrelated stuff).

Best,

Zvi.
-- 
Dr. Zvi Har'El     mailto:rl@math.technion.ac.il     Department of Mathematics
tel:+972-54-227607                   Technion - Israel Institute of Technology
fax:+972-4-8324654 http://www.math.technion.ac.il/~rl/     Haifa 32000, ISRAEL
"If you can't say somethin' nice, don't say nothin' at all." -- Thumper (1942)
                                 Sunday, 13 Tammuz 5762, 23 June 2002,  5:10PM