You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2014/04/10 22:57:22 UTC

[Bug 56385] New: strdup possible null pointer dereference

https://issues.apache.org/bugzilla/show_bug.cgi?id=56385

            Bug ID: 56385
           Summary: strdup possible null pointer dereference
           Product: Apache httpd-2
           Version: 2.2.27
          Hardware: PC
                OS: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Core
          Assignee: bugs@httpd.apache.org
          Reporter: max@cert.cx

Unchecked Return Value to memcpy() on NOPOSIX systems

httpd-2.2.27/srclib/apr/strings/apr_cpystrn.c

#if !APR_HAVE_STRDUP
char *strdup(const char *str)
{
    char *sdup;
    size_t len = strlen(str) + 1;

    sdup = (char *) malloc(len);
    memcpy(sdup, str, len);

    return sdup;
}
#endif


BR,
Maksymilian
cifrex.org

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 56385] strdup possible null pointer dereference

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56385

Christophe JAILLET <ch...@wanadoo.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|Core                        |APR
            Version|2.2.27                      |HEAD
           Assignee|bugs@httpd.apache.org       |bugs@apr.apache.org
            Product|Apache httpd-2              |APR

--- Comment #1 from Christophe JAILLET <ch...@wanadoo.fr> ---
Reassigning to APR

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org