https://bz.apache.org/bugzilla/show_bug.cgi?id=66034
--- Comment #2 from abernal <[email protected]> --- This is fixed in trunk by r1900307 (commit 499a90a672), which changes "int left" to "apr_size_t left" in do_pattmatch(). The trunk code now has it, but the 2.4.x branch still has "int left = bytes;" in modules/filters/mod_substitute.c and I did not find a proposal for r1900307 in the STATUS file of 2.4.x, so the bug cannot be closed yet. A backport to 2.4.x is available as a pull request: https://github.com/apache/httpd/pull/871 (the same one line change and the same changes-entries file as in trunk). It still needs a STATUS proposal and votes. After it is merged this bug can be resolved. I did not reproduce the overflow, which needs a response line of 2 GiB. I only checked that the changed file compiles. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
