https://issues.apache.org/bugzilla/show_bug.cgi?id=45688
Summary: Bad parameter for sizeof() in ap_os_error_message()
Product: Apache httpd-1.3
Version: HEAD
Platform: PC
OS/Version: OS/2
Status: NEW
Severity: trivial
Priority: P2
Component: core
AssignedTo: [email protected]
ReportedBy: [EMAIL PROTECTED]
In the function ap_os_error_message in apache_1.3.41/src/os/os2/util_os2.c a
overflow check is done between len and the size of result. If len is bigger
than sizeof(buf), it's decreased to "sizeof(buf-1)" - this looks like a typo
and should probably be "sizeof(buf)-1".
155: if (len >= sizeof(result))
156: len = sizeof(result-1);
should probably be
155: if (len >= sizeof(result))
156: len = sizeof(result)-1;
I haven't/can't "confirmed" this bug, but it sure looks like one to me :)
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]