vuori opened a new pull request, #12634:
URL: https://github.com/apache/trafficserver/pull/12634

   Handling of the `Accept-Encoding` field in the `stats_over_http` plugin used 
`strstr()` on the result of `TSMimeHdrFieldValueStringGet leading` leading to 
read of uninitialized memory. As a workaround, make a null-terminated copy of 
the header string.
   
   As a matter of opinion, I think the compression support in `stats_over_http` 
should be completely removed as it significantly complicates the code for 
questionable benefit. Ideally users who care about this could stack the 
`compress` plugin, though I'm not clear on whether this works with intercept?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to