Re: [AOLSERVER] AOLserver 4.0.6 has crashing bug leading to DOS.

2004-07-16 Thread Rob Crittenden
This causes a core dump? rob Stephen Deasey wrote: How to reproduce: telnet host 80 GET / HTTP/1.1 I sent an email about this early yesterday well before the release, but didn't get any response. Thanks. -- AOLserver - http://www.aolserver.com/ To Remove yourself from this list,

Re: [AOLSERVER] AOLserver 4.0.6 has crashing bug leading to DOS.

2004-07-16 Thread Stephen Deasey
Line 1110 of driver.c: sockPtr-reqPtr-request-method = BAD; request-method is usually a malloced string, but here it's pointing to static storage. After request is finnished Ns_FreeRequest is called on the request pointer, which then tries to ns_free method. The server aborts at this