https://issues.apache.org/bugzilla/show_bug.cgi?id=45688

           Summary: Bad parameter for sizeof() in ap_os_error_message()
           Product: Apache httpd-1.3
           Version: HEAD
          Platform: PC
        OS/Version: OS/2
            Status: NEW
          Severity: trivial
          Priority: P2
         Component: core
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


In the function ap_os_error_message in apache_1.3.41/src/os/os2/util_os2.c a
overflow check is done between len and the size of result. If len is bigger
than sizeof(buf), it's decreased to "sizeof(buf-1)" - this looks like a typo
and should probably be "sizeof(buf)-1".

155: if (len >= sizeof(result))
156:  len = sizeof(result-1);

should probably be

155: if (len >= sizeof(result))
156:  len = sizeof(result)-1;

I haven't/can't "confirmed" this bug, but it sure looks like one to me :)


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to