You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Evgeny Kotkov <ev...@visualsvn.com> on 2016/10/10 11:15:57 UTC

Re: Unbounded memory usage in mod_dav + mod_headers/mod_deflate/...

Evgeny Kotkov <ev...@visualsvn.com> writes:

> However, the problem I described in this thread is different, and it just
> happens to have the same visible consequence.
>
> What is probably more important, the dav_send_one_response() function
> that has the flaw (see the proposed patch) *just* got promoted into a public
> API, and will become the part of the next 2.4.x release [2].  So I prepared
> the patch, assuming that it would be better to fix this before it becomes
> public.

I committed the fix for dav_send_one_response() function in r1764040 [1],
and proposed it for backport to 2.4.x.  Apart from this, I committed the
second patch that adds the note about the API issue in r1764043 [2].

[1] https://svn.apache.org/r1764040
[2] https://svn.apache.org/r1764043


Regards,
Evgeny Kotkov