TSMimeHdrFieldValueStringInsert() can use freed memory to edit headers
----------------------------------------------------------------------
Key: TS-827
URL: https://issues.apache.org/jira/browse/TS-827
Project: Traffic Server
Issue Type: Bug
Components: MIME
Affects Versions: 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.1.9
Reporter: William Bardwell
Attachments: headers-prealloc.diff
TSMimeHdrFieldValueStringInsert() and other TSMimeHdrFieldValue*() APIs can use
freed memory to edit headers
due to calling HdrHeap::coalesce_str_heaps() from HdrHeap::allocate_str() from
mime_field_value_insert_comma_val() and other mime_field_value_*comma_val()
functions while holding pointers
into the HdrHeap.
I have a hacky but functional patch for this.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
