[Varnish] #606: Varnish 2.0.6 -- fix for ESI src= parsing error -- causes a "bogus" character in the URL and a potential memory clobber

Varnish varnish-bugs at projects.linpro.no
Mon Jan 4 11:56:59 CET 2010


#606: Varnish 2.0.6 -- fix for ESI src= parsing error -- causes a "bogus"
character in the URL and a potential memory clobber
--------------------+-------------------------------------------------------
 Reporter:  niz     |        Owner:           
     Type:  defect  |       Status:  closed   
 Priority:  high    |    Milestone:           
Component:  build   |      Version:  trunk    
 Severity:  normal  |   Resolution:  duplicate
 Keywords:          |  
--------------------+-------------------------------------------------------
Changes (by tfheen):

  * status:  new => closed
  * resolution:  => duplicate

Comment:

 You are looking at 2.0.5, not 2.0.6.  The relevant code from 2.0.6 reads:

 {{{
                 if ( val.b != val.e ) {
                         s = Tlen(val) + 1;
                         c = WS_Alloc(ws, s);
                         memcpy(c, val.b, Tlen(val));
                         val.b = c;
                         val.e = val.b + s;
                         val.e[-1] = '\0';
                 }
 }}}

 (This fix was the primary reason for 2.0.6 being needed)

-- 
Ticket URL: <http://varnish.projects.linpro.no/ticket/606#comment:1>
Varnish <http://varnish.projects.linpro.no/>
The Varnish HTTP Accelerator


More information about the varnish-bugs mailing list