Re: svn commit: r543515 - in /httpd/httpd/trunk: CHANGES modules/cache/mod_mem_cache.c

2007-06-01 Thread Ruediger Pluem
On 06/01/2007 05:50 PM, [EMAIL PROTECTED] wrote: Author: covener Date: Fri Jun 1 08:50:12 2007 New Revision: 543515 URL: http://svn.apache.org/viewvc?view=revrev=543515 Log: SECURITY: CVE-2007-1862 (cve.mitre.org) mod_mem_cache: Copy headers into longer lived storage; header names and

Re: svn commit: r543515 - in /httpd/httpd/trunk: CHANGES modules/cache/mod_mem_cache.c

2007-06-01 Thread Ruediger Pluem
On 06/01/2007 10:55 PM, Ruediger Pluem wrote: On 06/01/2007 05:50 PM, [EMAIL PROTECTED] wrote: + static apr_status_t recall_headers(cache_handle_t *h, request_rec *r) { mem_cache_object_t *mobj = (mem_cache_object_t*) h-cache_obj-vobj; -h-req_hdrs = apr_table_copy(r-pool,

Re: svn commit: r543515 - in /httpd/httpd/trunk: CHANGES modules/cache/mod_mem_cache.c

2007-06-01 Thread Eric Covener
On 6/1/07, Ruediger Pluem [EMAIL PROTECTED] wrote: Ahh. Should have read http://issues.apache.org/bugzilla/show_bug.cgi?id=41551#c2 before which answers my question :-). Anyway another question: From a first glance your original patch and this patch basicly seem to do the same thing. But the

Re: svn commit: r543515 - in /httpd/httpd/trunk: CHANGES modules/cache/mod_mem_cache.c

2007-06-01 Thread Ruediger Pluem
On 06/01/2007 11:18 PM, Eric Covener wrote: On 6/1/07, Ruediger Pluem [EMAIL PROTECTED] wrote: Ahh. Should have read http://issues.apache.org/bugzilla/show_bug.cgi?id=41551#c2 before which answers my question :-). Anyway another question: From a first glance your original patch and this

Re: svn commit: r543515 - in /httpd/httpd/trunk: CHANGES modules/cache/mod_mem_cache.c

2007-06-01 Thread William A. Rowe, Jr.
Ruediger Pluem wrote: On 06/01/2007 11:18 PM, Eric Covener wrote: On 6/1/07, Ruediger Pluem [EMAIL PROTECTED] wrote: Ahh. Should have read http://issues.apache.org/bugzilla/show_bug.cgi?id=41551#c2 before which answers my question :-). Anyway another question: From a first glance your