You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by "MegaManSec (via GitHub)" <gi...@apache.org> on 2025/11/02 15:51:55 UTC
[PR] AjpProcessor: fix readMessage() bounds check [tomcat]
MegaManSec opened a new pull request, #916:
URL: https://github.com/apache/tomcat/pull/916
The payload capacity should have been (buf.length - H_SIZE).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [PR] AjpProcessor: fix readMessage() bounds check [tomcat]
Posted by "rmaucher (via GitHub)" <gi...@apache.org>.
rmaucher commented on PR #916:
URL: https://github.com/apache/tomcat/pull/916#issuecomment-3480039478
That makes sense so it was merged.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [PR] AjpProcessor: fix readMessage() bounds check [tomcat]
Posted by "rmaucher (via GitHub)" <gi...@apache.org>.
rmaucher merged PR #916:
URL: https://github.com/apache/tomcat/pull/916
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [PR] AjpProcessor: fix readMessage() bounds check [tomcat]
Posted by "MegaManSec (via GitHub)" <gi...@apache.org>.
MegaManSec commented on PR #916:
URL: https://github.com/apache/tomcat/pull/916#issuecomment-3479858432
@rmaucher java is not my area of exptertise. what's the actual outcome of this bug? it was found automatically with ZeroPath, btw.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [PR] AjpProcessor: fix readMessage() bounds check [tomcat]
Posted by "MegaManSec (via GitHub)" <gi...@apache.org>.
MegaManSec commented on PR #916:
URL: https://github.com/apache/tomcat/pull/916#issuecomment-3480959573
sorry, i mean, what could this bug actually cause? just some type of exception?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [PR] AjpProcessor: fix readMessage() bounds check [tomcat]
Posted by "rmaucher (via GitHub)" <gi...@apache.org>.
rmaucher commented on PR #916:
URL: https://github.com/apache/tomcat/pull/916#issuecomment-3482049867
The error is supposed to be reported with a specific message, and this would instead be an array out of bounds exception, but there's nothing very significant.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org