Re: svn commit: r1584896 - /httpd/httpd/trunk/modules/filters/mod_proxy_html.c

2014-04-17 Thread Marion Christophe JAILLET
r1588356 Should you share my analysis and should a CHANGE be useful for what I think is a corner case, feel free to add something, or I can do it by the end of the week. Does this fix a crash or a parsing error or ...? (CHANGES)

Re: svn commit: r1584896 - /httpd/httpd/trunk/modules/filters/mod_proxy_html.c

2014-04-15 Thread Jeff Trawick
On Fri, Apr 4, 2014 at 4:30 PM, jaillet...@apache.org wrote: Author: jailletc36 Date: Fri Apr 4 20:30:38 2014 New Revision: 1584896 URL: http://svn.apache.org/r1584896 Log: Do not perform a p+= 7 that could go past the end of the buffer in case we find a 'content' without a corresponding

Re: svn commit: r1584896 - /httpd/httpd/trunk/modules/filters/mod_proxy_html.c

2014-04-15 Thread Marion Christophe JAILLET
Hi, AFAIK, no crash has ever been reported for that. I just noted this while looking at PR56287 and found it odd. A file such as: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- htmlhead meta http-equiv=Conten contentheadbody/body/html +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- will trigger the scan past the end