]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
authorYoufu Zhang <zhangyoufu@gmail.com>
Fri, 9 Dec 2022 11:15:48 +0000 (19:15 +0800)
committerChristopher Faulet <cfaulet@haproxy.com>
Fri, 9 Dec 2022 11:23:14 +0000 (12:23 +0100)
commit2e6bf0a2722866ae0128a4392fa2375bd1f03ff8
treedc67b4eb4d5827b4dacec73ed62a210759d03a2a
parent7edec90c002740df26d13f8f780f5ccd762fb876
BUG/MAJOR: fcgi: Fix uninitialized reserved bytes

The output buffer is not zero-initialized. If we don't clear reserved
bytes, fcgi requests sent to backend will leak sensitive data.

This patch must be backported as far as 2.2.
src/fcgi.c