httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jeff Trawick <>
Subject Re: mod_usertrack bugfix patch
Date Tue, 25 Feb 2003 11:29:22 GMT
Manni Wood wrote:

> I am submitting a patch to mod_usertrack for both Apache 2.0 and 1.3 
> for your consideration.

> The patch fixes a bug where the use of strstr() to find the name of 
> the cookie in the cookieheader can accidentally "find" the name of the 
> cookie in what is actually the contents of a cookie if the contents 
> happen to contain the name of the user tracking cookie.
> The patch relies on a robust regexp to find the cookiename in the 
> header instead of strstr().

performance concern a.k.a. dumb question...  is a regexp required for 
fixing this problem?

> More details are at

excellent resource...  I applaud you for taking the initiative to deal 
with this so carefully

View raw message