DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=31036>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=31036 Apache mod_rewrite DBM file zero byte overflow ------- Additional Comments From [EMAIL PROTECTED] 2004-09-13 09:21 ------- If this code is supposed to be robust against arbitrary values of dbmval.dsize the this: apr_pstrmemdup(r->pool, dbmval.dptr, dbmval.dsize); still doesn't seem like a good idea. But I don't know how much validation the particular apr_dbm implementations will give you on .dsize. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]