You are viewing a plain text version of this content. The canonical link for it is here.

Posted to bugs@httpd.apache.org by bu...@apache.org on 2026/10/08 17:11:58 UTC

[Bug 70012] Substitute with empty replacement triggers subsequent Substitute empty reply

https://bz.apache.org/bugzilla/show_bug.cgi?id=70012

--- Comment #2 from abernal <ab...@apache.org> ---
A fix and a regression test are available as a pull request:
https://github.com/apache/httpd/pull/806

The crash is in ap_varbuf_regsub() (server/util.c): when the result is empty
and the varbuf has no buffer yet, the terminating NUL is written to the shared
read-only empty string.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org