Multiple ProxyBlock entries will crash Apache
We here at F-Secure have identified a small problem in ProxyBlock =
handling.
In ap_proxy_checkproxyblock, if the conf->noproxies table contains =
multiple
elements, it might happen that uri_addr is set to NULL and later used ->
BOOM!
See PR 19023 (patch included)
--
Sami Tikka, senior software engineer, F-Secure Corporation
tel: +358 9 2520 5115, fax: +358 9 2520 5015
http://www.F-Secure.com
F-Secure: Securing the Mobile Enterprise
Re: Multiple ProxyBlock entries will crash Apache
Tikka, Sami wrote:
> We here at F-Secure have identified a small problem in ProxyBlock handling.
> In ap_proxy_checkproxyblock, if the conf->noproxies table contains multiple
> elements, it might happen that uri_addr is set to NULL and later used ->
> BOOM!
>
> See PR 19023 (patch included)
Patch has been applied.
Regards,
Graham
--
-----------------------------------------
minfrin [at] sharp.fm "There's a moon
over Bourbon Street
tonight..."