https://bz.apache.org/bugzilla/show_bug.cgi?id=57531

--- Comment #4 from Brian Behlendorf <[email protected]> ---
More details:

A friend (jl) noted:
> A quick glance at the code suggested that the request method is
> not set up in the request object and in the function mentioned in the
> stacktrace this leads to strcmp(NULL, "INCLUDED") -> segfault.

So I went about looking for odd-looking requests that might have no method set,
and found (IP address anonymized):

x.x.x.x - - [04/Mar/2015:13:36:01 -0800] "\x16\x03\x03" 400 326 "-" "-"

Posts online suggested this was an SSL client attempting to talk SSL to port
80.  And in fact, I could reproduce this by trying to go to

https://host:80/

to the point where I could even generate a core, which I couldn't do before.

Anyways, looks like before that strcmp is called the request method should be
tested for, or set.

Brian

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to