/[Apache-SVN]
ViewVC logotype

Revision 1640036


Jump to revision: Previous Next
Author: ylavic
Date: Sun Nov 16 22:04:39 2014 UTC (9 years, 5 months ago)
Changed paths: 3
Log Message:
mod_proxy_fcgi: SECURITY: CVE-2014-3583 (cve.mitre.org)
Fix a potential crash with response headers' size above 8K.

The code changes to mod_authnz_fcgi keep the handle_headers()
function in sync between the two modules.  mod_authnz_fcgi
does not have this issue because it allocated a separate byte
for terminating '\0'.


Changed paths

Path Details
Directoryhttpd/httpd/trunk/CHANGES modified , text changed
Directoryhttpd/httpd/trunk/modules/aaa/mod_authnz_fcgi.c modified , text changed
Directoryhttpd/httpd/trunk/modules/proxy/mod_proxy_fcgi.c modified , text changed

infrastructure at apache.org
ViewVC Help
Powered by ViewVC 1.1.26