Commit 9eff14ed authored by Eric Covener's avatar Eric Covener
Browse files

propose stack overflow in lua websockets 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1663389 13f79535-47bb-0310-9956-ffa450edef68
parent 8d9cf23a

STATUS

+7 −0
Changes for STATUS: 7 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -257,6 +257,13 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK: 
     2.4.x patch: trunk works (modulo CHANGES)

     ylavic: +1



  *) SECURITY: CVE-2015-0228 (cve.mitre.org)

     mod_lua: A maliciously crafted websockets PING after a script

     calls r:wsupgrade() can cause a child process crash.

     trunk patch: http://svn.apache.org/viewvc?view=revision&revision=1657261

     2.4.x patch: trunk works

     Note: Technically CTR but it's a CVE.

     covener: +1



OTHER PROPOSALS