The basecgi patch has this particular line:

+       /* all other data will be later passed to script */
+       sprintf(r->cgicont, "%s", p);

cgicont is declared as:

char cgicont[PATH_MAX];

which is 4096 on my machine.

fortunately, max p derives from HEADER_MAX, which is 4096

If you patch the header size const to be larger then 4096, then
sprintf will overflow.


I will send a patch to fix that soon, but for now, i guess using
`snprintf` will do the trick.

Reply via email to