[PATCH] fixes segfault in mod_cache (2.0.40)

2002-08-26 Thread Kris Verbeeck
Hi, Someone in our QA team tried the following test: telnet 80 GET https://whatever.html HTTP/1.0 this resulted in a segfault for the child that handled the request. Agreed, this is not a normal HTTP request, but firing enough of them will surely DoS the server. Our apache run

Re: [PATCH] fixes segfault in mod_cache (2.0.40)

2002-08-26 Thread Ian Holsman
Thanks Kris. Keep them coming ;-) Kris Verbeeck wrote: > Hi, > > Someone in our QA team tried the following test: > > telnet 80 > GET https://whatever.html HTTP/1.0 > > this resulted in a segfault for the child that handled the request. > Agreed, this is not a normal HTTP request

Re: [PATCH] fixes segfault in mod_cache (2.0.40)

2002-08-27 Thread Kris Verbeeck
Apache behaviour with this patch (or without mod_cache): The request: GET https://whatever.html HTTP/1.0 is equivalent to: GET / HTTP/1.0 I'm wondering whether this is the desired behaviour? This is also the behaviour of a 1.3.x Apache. Maybe Apache should block this kind of

Re: [PATCH] fixes segfault in mod_cache (2.0.40)

2002-08-27 Thread Graham Leggett
Kris Verbeeck wrote: > Apache behaviour with this patch (or without mod_cache): > > The request: > > GET https://whatever.html HTTP/1.0 > > is equivalent to: > > GET / HTTP/1.0 > > I'm wondering whether this is the desired behaviour? This is > also the behaviour of a 1.3.x Apach