Trunk version of patch works
+1: rpluem, jim, pquerna
+ * mod_proxy_ajp: Crosscheck the length of the body chunk with the length
+ of the ajp message to prevent readings beyond the buffer boundaries
+ which possibly could reveal sensitive memory contents to the client.
+ Trunk version of patch:
+ http://svn.apache.org/viewcvs?rev=383339&view=rev
+ Backport version for 2.2.x of patch:
+ Trunk version of patch works
+ +1: rpluem, pquerna, jim
PATCHES PROPOSED TO BACKPORT FROM TRUNK:
Trunk version of patch works
+1: rpluem, jim
- * mod_proxy_ajp: Crosscheck the length of the body chunk with the length
- of the ajp message to prevent readings beyond the buffer boundaries
- which possibly could reveal sensitive memory contents to the client.
- Trunk version of patch:
- http://svn.apache.org/viewcvs?rev=383339&view=rev
- Backport version for 2.2.x of patch:
- Trunk version of patch works
- +1: rpluem, pquerna, jim
-
* mod_isapi: Trivial compiler emit fix for const'ness - noticed on OS/X
but not noticed before on VC.
http://svn.apache.org/viewcvs?rev=384731&view=rev