https://bz.apache.org/bugzilla/show_bug.cgi?id=66136

            Bug ID: 66136
           Summary: Lacking a check for the return of
                    apr_sockaddr_info_get() in listen.c
           Product: Apache httpd-2
           Version: 2.5-HEAD
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Core
          Assignee: bugs@httpd.apache.org
          Reporter: xkernel.w...@foxmail.com
  Target Milestone: ---

Missing a check for the return value of apr_sockaddr_info_get() in
https://github.com/apache/httpd/blob/a296776a6a5ba8fe1f91de181ca6ce6293b71a52/server/listen.c#L884,
which may further result in wrong memory access if resolving the address info
fails.

Therefore, it is better to get the return value of apr_sockaddr_info_get() and
check whether it is APR_SUCCESS.

This bug is at least from 2.4.51 in httpd-2.4.51/server/listen.c:689:13.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

Reply via email to