From: Joe Orton <jorton@apache.org>
Date: Fri, 5 Oct 2018 10:12:12 +0000 (+0000)
Subject: * modules/proxy/ajp_header.c (sc_for_req_header): Zero-initialize
X-Git-Tag: 2.5.0-alpha2-ci-test-only~2305
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6ac821d9af5b2c84e77bc02ebb179c64c7f4653c;p=thirdparty%2Fapache%2Fhttpd.git

* modules/proxy/ajp_header.c (sc_for_req_header): Zero-initialize
  buffer to avoid potential (harmless) memcmp comparison against
  garbage stack data later.  (clang warning).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1842881 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/modules/proxy/ajp_header.c b/modules/proxy/ajp_header.c
index 4cfc65b9f94..b4dc47ccf50 100644
--- a/modules/proxy/ajp_header.c
+++ b/modules/proxy/ajp_header.c
@@ -59,6 +59,7 @@ static int sc_for_req_header(const char *header_name)
     if (len < 4 || len > 15)
         return UNKNOWN_METHOD;
 
+    memset(header, 0, sizeof header);
     while (*p)
         header[i++] = apr_toupper(*p++);
     header[i] = '\0';