From 8c16186aa66a6fafc98a09297a23639ceffe3ecb Mon Sep 17 00:00:00 2001 From: Jim Jagielski Date: Mon, 12 Dec 2016 16:14:10 +0000 Subject: [PATCH] some context git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1773811 13f79535-47bb-0310-9956-ffa450edef68 --- STATUS | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/STATUS b/STATUS index a10ef02203..2844523c99 100644 --- a/STATUS +++ b/STATUS @@ -114,6 +114,18 @@ CURRENT RELEASE NOTES: RELEASE SHOWSTOPPERS: *) Looping during check_headers() failure. + Fix potential looping in new check_headers() due to new pattern of + ap_die() from http header filter. Also, remove the bad headers explicitly. + Trunk patch: https://svn.apache.org/r1773293 + 2.4.x patch: trunk works + +1: covener, jim + -1: wrowe + covener: This is not ideal but the looping/OOM is bad. + jim: with the understanding that more work post release + wrowe: *IIUC* If we are transmitting the discarded body to the client, + and switching the code to 500, this isn't really a salvagable + resolution. Two alternatives suggested to the list a few days ago. + ylavic: how about r1773761? *) Final CVE check -- 2.49.0