https://bz.apache.org/bugzilla/show_bug.cgi?id=64297

--- Comment #1 from Stefan Eissing <[email protected]> ---
Thanks for your report.

I agree that md_json_read_http() should NULL the pointer if the response is not
of a json content type. I will fix the code accordingly.

As for an attack, the function is only called when a "json" content type has
been detected. I fail to see how an uninitialized *problem could be accessed.
Maybe I am not seeing something?

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to