]> granicus.if.org Git - apache/commit
Merge r1575400 from trunk:
authorJim Jagielski <jim@apache.org>
Mon, 10 Mar 2014 11:23:47 +0000 (11:23 +0000)
committerJim Jagielski <jim@apache.org>
Mon, 10 Mar 2014 11:23:47 +0000 (11:23 +0000)
commit9e659703d46cfeced79cfa44917b24a95781ae8d
tree72d6403cd93b3ecf86ad896049b51bd88687b4ef
parentef53dd3f6bf11f874e7cd08979afb6bffc7ed7f5
Merge r1575400 from trunk:

CVE-2014-0098 (reported by Rainer Canavan <rainer-apache 7val com>)
Segfaults w/ truncated cookie logging.

Clean up the cookie logging parser to recognize only the cookie=value pairs,
not valueless cookies.  This refactors multiple passes over the same string
buffer into a single pass parser.

Submitted by: wrowe
Reviewed by: rpluem, jim

Submitted by: wrowe
Reviewed/backported by: jim

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1575904 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
STATUS
modules/loggers/mod_log_config.c