Skip to content
  • Joe Orton's avatar
    fb57ea42
    Merge 1610491 from trunk: · fb57ea42
    Joe Orton authored
    SECURITY (CVE-2014-0226): Fix a race condition in scoreboard handling,
    which could lead to a heap buffer overflow.  Thanks to Marek Kroemeke
    working with HP's Zero Day Initiative for reporting this.
    
    * include/scoreboard.h: Add ap_copy_scoreboard_worker.
    
    * server/scoreboard.c (ap_copy_scoreboard_worker): New function.
    
    * modules/generators/mod_status.c (status_handler): Use it.
    
    * modules/lua/lua_request.c (lua_ap_scoreboard_worker): Likewise.
    
    Reviewed by: trawick, jorton, covener, jim
    Submitted by: jorton, covener
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1610499 13f79535-47bb-0310-9956-ffa450edef68
    fb57ea42
    Merge 1610491 from trunk:
    Joe Orton authored
    SECURITY (CVE-2014-0226): Fix a race condition in scoreboard handling,
    which could lead to a heap buffer overflow.  Thanks to Marek Kroemeke
    working with HP's Zero Day Initiative for reporting this.
    
    * include/scoreboard.h: Add ap_copy_scoreboard_worker.
    
    * server/scoreboard.c (ap_copy_scoreboard_worker): New function.
    
    * modules/generators/mod_status.c (status_handler): Use it.
    
    * modules/lua/lua_request.c (lua_ap_scoreboard_worker): Likewise.
    
    Reviewed by: trawick, jorton, covener, jim
    Submitted by: jorton, covener
    
    
    git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1610499 13f79535-47bb-0310-9956-ffa450edef68
To find the state of this project's repository at the time of any of these versions, check out the tags.
Loading