From 4d5e0377c573dd137300725466d9358f29a3a95d Mon Sep 17 00:00:00 2001 From: Yann Ylavic Date: Mon, 12 Dec 2016 20:50:05 +0000 Subject: [PATCH] Propose. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1773869 13f79535-47bb-0310-9956-ffa450edef68 --- STATUS | 19 ++++++++++--------- 1 file changed, 10 insertions(+), 9 deletions(-) diff --git a/STATUS b/STATUS index 2844523c999..4eb04b96082 100644 --- a/STATUS +++ b/STATUS @@ -115,17 +115,18 @@ RELEASE SHOWSTOPPERS: *) Looping during check_headers() failure. Fix potential looping in new check_headers() due to new pattern of - ap_die() from http header filter. Also, remove the bad headers explicitly. + ap_die() from http header filter. Also, clear the previous headers + and body explicitly. Trunk patch: https://svn.apache.org/r1773293 + https://svn.apache.org/r1773293 + https://svn.apache.org/r1773761 + https://svn.apache.org/r1773779 + https://svn.apache.org/r1773812 + https://svn.apache.org/r1773861 + https://svn.apache.org/r1773862 + https://svn.apache.org/r1773865 2.4.x patch: trunk works - +1: covener, jim - -1: wrowe - covener: This is not ideal but the looping/OOM is bad. - jim: with the understanding that more work post release - wrowe: *IIUC* If we are transmitting the discarded body to the client, - and switching the code to 500, this isn't really a salvagable - resolution. Two alternatives suggested to the list a few days ago. - ylavic: how about r1773761? + +1: ylavic *) Final CVE check -- 2.47.2