[PATCH 55360] Potential buffer overflows in support/ab

2013-08-05 Thread Mike Rumph
Hello all, A comment section in support/ab.c lists the following known problems: /* * BUGS: * * - uses strcpy/etc. * - has various other poor buffer attacks related to the lazy parsing of * response headers from the server * - doesn't implement much of HTTP/1.x, only accepts certain

Re: [PATCH 55360] Potential buffer overflows in support/ab

2013-08-05 Thread Jeff Trawick
On Mon, Aug 5, 2013 at 2:11 PM, Mike Rumph mike.ru...@oracle.com wrote: Hello all, A comment section in support/ab.c lists the following known problems: /* * BUGS: * * - uses strcpy/etc. * - has various other poor buffer attacks related to the lazy parsing of * response headers

Re: [PATCH 55360] Potential buffer overflows in support/ab

2013-08-05 Thread Jeff Trawick
On Mon, Aug 5, 2013 at 4:10 PM, Jeff Trawick traw...@gmail.com wrote: On Mon, Aug 5, 2013 at 2:11 PM, Mike Rumph mike.ru...@oracle.com wrote: Hello all, A comment section in support/ab.c lists the following known problems: /* * BUGS: * * - uses strcpy/etc. * - has various other