From: Aaron Bannert <aaron@apache.org>
Date: Wed, 31 Oct 2001 18:31:50 +0000 (+0000)
Subject: One down...
X-Git-Tag: 2.0.28~69
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=11742b3fe3d2ca8e70031e92440c2ec3908144dc;p=thirdparty%2Fapache%2Fhttpd.git

One down...


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@91712 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/CHANGES b/CHANGES
index e49e2b28afb..e516cacba4e 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,10 @@
 Changes with Apache 2.0.28-dev
 
+  *) Fixed a memory leak in the getline parsing code that could
+     be triggered by arbitrarily large header lines. Requests
+     from the core input filter for single lines are now limited
+     to HUGE_STRING_LEN (8192 bytes).  [Aaron Bannert]
+
   *) Introduce an Apache mod_ssl initial configuration template 
      (ssl.conf, generated from ssl-std.conf).  [Ralf S. Engelschall]