You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2022/06/22 11:08:58 UTC

[Bug 66136] New: Lacking a check for the return of apr_sockaddr_info_get() in listen.c

https://bz.apache.org/bugzilla/show_bug.cgi?id=66136

            Bug ID: 66136
           Summary: Lacking a check for the return of
                    apr_sockaddr_info_get() in listen.c
           Product: Apache httpd-2
           Version: 2.5-HEAD
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Core
          Assignee: bugs@httpd.apache.org
          Reporter: xkernel.wang@foxmail.com
  Target Milestone: ---

Missing a check for the return value of apr_sockaddr_info_get() in
https://github.com/apache/httpd/blob/a296776a6a5ba8fe1f91de181ca6ce6293b71a52/server/listen.c#L884,
which may further result in wrong memory access if resolving the address info
fails.

Therefore, it is better to get the return value of apr_sockaddr_info_get() and
check whether it is APR_SUCCESS.

This bug is at least from 2.4.51 in httpd-2.4.51/server/listen.c:689:13.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 66136] Lacking a check for the return of apr_sockaddr_info_get() in listen.c

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=66136

Giovanni Bechis <gi...@paclan.it> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED

--- Comment #1 from Giovanni Bechis <gi...@paclan.it> ---
Fixed in r1902318.
Thanks

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org