Fwd: svn commit: r563329 - in /httpd/httpd/branches/2.0.x: CHANGES STATUS modules/proxy/proxy_util.c

[Eric Covener <co...@gmail.com>]

I just now realized this change drops the timezone differences when
converting  dates (apr_date_parse_http()).  Is this okay?

---------- Forwarded message ----------
From: covener@apache.org <co...@apache.org>
Date: Aug 6, 2007 7:15 PM
Subject: svn commit: r563329 - in /httpd/httpd/branches/2.0.x: CHANGES
STATUS modules/proxy/proxy_util.c
To: cvs@httpd.apache.org


Author: covener
Date: Mon Aug  6 16:15:02 2007
New Revision: 563329

URL: http://svn.apache.org/viewvc?view=rev&rev=563329
Log:
backport mod_proxy date parsing buffer over-read (CVE-2007-3847)

Submitted by: Davi Arnaut, Nick Kew
Reviewed by: niq, rpluem, covener

Modified:
    httpd/httpd/branches/2.0.x/CHANGES
    httpd/httpd/branches/2.0.x/STATUS
    httpd/httpd/branches/2.0.x/modules/proxy/proxy_util.c
-- 
Eric Covener
covener@gmail.com

Re: svn commit: r563329 - in /httpd/httpd/branches/2.0.x: CHANGES STATUS modules/proxy/proxy_util.c

[Plüm, Rüdiger, VF-Group <ru...@vodafone.com>]

> -----Ursprüngliche Nachricht-----
> Von: Eric Covener  
> Gesendet: Dienstag, 7. August 2007 16:08
> An: dev@httpd.apache.org
> Betreff: Fwd: svn commit: r563329 - in 
> /httpd/httpd/branches/2.0.x: CHANGES STATUS modules/proxy/proxy_util.c
> 
> 
> I just now realized this change drops the timezone differences when
> converting  dates (apr_date_parse_http()).  Is this okay?

I guess yes, because according to RFC2616 3.3.1 all HTTP times are GMT.

Regards

Rüdiger