httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Justin Erenkrantz <>
Subject Re: [PATCH] mod_disk cached fixed
Date Wed, 04 Aug 2004 18:21:25 GMT
--On Wednesday, August 4, 2004 5:26 PM +0200 Graham Leggett <> 

> How resilient is this to garbage data on the disk? A risk exists of somebody
> getting write access to the headers cache file, and then crafting a cache
> headers file which when read causes a takeover of the webserver. Just want
> to check that it's covered.

It's only reading in integers not pointers.  So I don't see how it'd cause a 
security risk.  -- justin

View raw message