On 2014-11-28, Ezequiel Garzon <[email protected]> wrote: > Hello! I know a lot is happening to httpd lately, so maybe this is not > an issue anymore. I've noticed that a malformed HTTP request such as > > $ printf 'GET /file\r\n\r\n'| nc myhost 80 > > doesn't just silently fail, but rather shuts down httpd. My > /etc/httpd.conf is minimal: > > server default {listen on egress port 80} > > Has anybody else tried this? > > Thanks and cheers, > > Ezequiel > >
httpd in 5.6 was very early code, I think this problem should be fixed in http://ftp.openbsd.org/pub/OpenBSD/patches/5.6/common/009_httpd.patch.sig BTW, this is not malformed, it's a valid HTTP 0.9 request.
