DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=31036>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=31036

Apache mod_rewrite DBM file zero byte overflow





------- Additional Comments From [EMAIL PROTECTED]  2004-09-13 09:21 -------
If this code is supposed to be robust against arbitrary values of dbmval.dsize
the this:

  apr_pstrmemdup(r->pool, dbmval.dptr, dbmval.dsize);

still doesn't seem like a good idea.  But I don't know how much validation the
particular apr_dbm implementations will give you on .dsize.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to