From: Yann Ylavic Date: Mon, 12 Dec 2016 20:50:05 +0000 (+0000) Subject: Propose. X-Git-Tag: 2.4.24~39 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4d5e0377c573dd137300725466d9358f29a3a95d;p=thirdparty%2Fapache%2Fhttpd.git Propose. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1773869 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/STATUS b/STATUS index 2844523c999..4eb04b96082 100644 --- a/STATUS +++ b/STATUS @@ -115,17 +115,18 @@ RELEASE SHOWSTOPPERS: *) Looping during check_headers() failure. Fix potential looping in new check_headers() due to new pattern of - ap_die() from http header filter. Also, remove the bad headers explicitly. + ap_die() from http header filter. Also, clear the previous headers + and body explicitly. Trunk patch: https://svn.apache.org/r1773293 + https://svn.apache.org/r1773293 + https://svn.apache.org/r1773761 + https://svn.apache.org/r1773779 + https://svn.apache.org/r1773812 + https://svn.apache.org/r1773861 + https://svn.apache.org/r1773862 + https://svn.apache.org/r1773865 2.4.x patch: trunk works - +1: covener, jim - -1: wrowe - covener: This is not ideal but the looping/OOM is bad. - jim: with the understanding that more work post release - wrowe: *IIUC* If we are transmitting the discarded body to the client, - and switching the code to 500, this isn't really a salvagable - resolution. Two alternatives suggested to the list a few days ago. - ylavic: how about r1773761? + +1: ylavic *) Final CVE check