From: Jim Jagielski <jim@apache.org>
Date: Mon, 12 Dec 2016 16:14:10 +0000 (+0000)
Subject: some context
X-Git-Tag: 2.4.24~40
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8c16186aa66a6fafc98a09297a23639ceffe3ecb;p=thirdparty%2Fapache%2Fhttpd.git

some context


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1773811 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index a10ef022034..2844523c999 100644
--- a/STATUS
+++ b/STATUS
@@ -114,6 +114,18 @@ CURRENT RELEASE NOTES:
 RELEASE SHOWSTOPPERS:
 
   *) Looping during check_headers() failure.
+     Fix potential looping in new check_headers() due to new pattern of
+     ap_die() from http header filter.  Also, remove the bad headers explicitly.
+     Trunk patch:  https://svn.apache.org/r1773293
+     2.4.x patch: trunk works
+     +1: covener, jim
+     -1: wrowe
+     covener: This is not ideal but the looping/OOM is bad.
+     jim: with the understanding that more work post release
+     wrowe: *IIUC* If we are transmitting the discarded body to the client,
+            and switching the code to 500, this isn't really a salvagable
+            resolution. Two alternatives suggested to the list a few days ago.
+     ylavic: how about r1773761?
 
   *) Final CVE check