DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUGĀ·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=43039>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED ANDĀ·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=43039





------- Additional Comments From [EMAIL PROTECTED]  2007-08-05 14:26 -------
(In reply to comment #1)
> I don't quite see your point.
> 
> My reading of RFC 2616 says, that the 0-octet is invalid in header lines.

Thats my point.

Why accepting invalid characters (and in this case the "special" NUL character)?

I dont know the side effects (somewhere deep inside the httpd code),
but i think no (real) client is sending \0 in a request.

On the other hand whats about:

print "GET / HTTP/1.0" . ("\x00" x 1000) . "\r\n\r\n";

(sends NUL 1000 times)

At the end this will result in 413/414 or something similar and the
httpd cant say why - it seams like a normal request.


-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to