[Varnish] #497: Overflow in vrt_assemble_string

Varnish varnish-bugs at projects.linpro.no
Fri Apr 24 16:28:31 CEST 2009


#497: Overflow in vrt_assemble_string
--------------------+-------------------------------------------------------
 Reporter:  sky     |       Owner:       
     Type:  defect  |      Status:  new  
 Priority:  normal  |   Milestone:       
Component:  build   |     Version:  trunk
 Severity:  normal  |    Keywords:       
--------------------+-------------------------------------------------------
 If you run out of workspace in vrt_assemble_string this isn't caught until
 after the memory allocation is done. WS_Reserve(0) reserves all the space
 left, not necessarily how much you need.

 If this happen there is an assertion that gets called after the byte
 modification is made.

 When we add error handling code to the out of memory situation,
 WS_Reserve(0) should probably be removed.

-- 
Ticket URL: <http://varnish.projects.linpro.no/ticket/497>
Varnish <http://varnish.projects.linpro.no/>
The Varnish HTTP Accelerator


More information about the varnish-bugs mailing list