]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
projects / thirdparty / apache / httpd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3f8cf7c) | patch
mod_substitute: fix heap over-read in set_pattern() delimiter scanning
authorJoe Orton <jorton@apache.org>
Fri, 17 Jul 2026 12:13:04 +0000 (12:13 +0000)
committerJoe Orton <jorton@apache.org>
Fri, 17 Jul 2026 12:13:04 +0000 (12:13 +0000)
commitcf75baf6a656bf810eb9375b6338557df58bbb2b
tree05c4975187dc51fe153d447e8f0e15266e4abe6btree | snapshot
parent3f8cf7cdcf89b532df106047f9e68b3375ebdb49commit | diff
mod_substitute: fix heap over-read in set_pattern() delimiter scanning

* modules/filters/mod_substitute.c (set_pattern): Guard the
  pre-incrementing delimiter scan loops with a NUL check, preventing
  a read past the end of the allocation when the from or to field has
  no closing delimiter.

Assisted-by: Claude Sonnet 4.6 <noreply@anthropic.com>
GitHub: closes #685

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1936264 13f79535-47bb-0310-9956-ffa450edef68
changes-entries/substitute-pattern-oob-read.txt [new file with mode: 0644] blob
modules/filters/mod_substitute.c diff | blob | blame | history
Mirror of https://github.com/apache/httpd.git