]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Merge r1575400 from trunk:
authorRuediger Pluem <rpluem@apache.org>
Wed, 12 Mar 2014 12:41:07 +0000 (12:41 +0000)
committerRuediger Pluem <rpluem@apache.org>
Wed, 12 Mar 2014 12:41:07 +0000 (12:41 +0000)
commit5abc0650d6aab5a19ea21be44788c0da7e59ed3c
tree11ea10ef96163a3ac35cbc5ddd2d1b65b4e93558
parent90df00f723e6c607ca08f5210c2ba7dc9b5fe322
Merge r1575400 from trunk:

CVE-2014-0098 (reported by Rainer Canavan <rainer-apache 7val com>)
Segfaults w/ truncated cookie logging.

Clean up the cookie logging parser to recognize only the cookie=value pairs,
not valueless cookies.  This refactors multiple passes over the same string
buffer into a single pass parser.

Submitted by: wrowe
Reviewed by: rpluem, jim

Reviewed by: wrowe, ylavic, jim

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1576716 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
STATUS
modules/loggers/mod_log_config.c