[BUG] mod_mime_magic: dumps core

[Martin Kraemer <Ma...@mch.sni.de>]

It dumps core in line 2131 ascmagic() which is called with nbytes=-1!!!

 2129       /* look for tokens from names.h - this is expensive! */
 2130       /* make a copy of the buffer here because strtok() will destroy it */
>2131       s = (unsigned char *) memcpy(nbuf, buf, nbytes);
				  ^^^^^^^^^^^^^^^^^^^^^^^^^^Here (copies 0xFFFFFFFF bytes)
 2132       s[nbytes] = '\0';
 2133       has_escapes = (memchr(s, '\033', nbytes) != NULL);

Here's the traceback:

ascmagic(r = 0x80cb1e0  [ 1], buf = "", nbytes = -1), line 2131 in "mod_mime_magic.c"
tryit(r = 0x80cb1e0  [ 2], buf = "", nb = -1), line 947 in "mod_mime_magic.c"
zmagic(r = 0x80cb1e0  [ 3], buf = "^_\03213^H", nbytes = 1025), line 2230 in "mod_mime_magic.c"
tryit(r = 0x80cb1e0  [ 4], buf = "^_\03213^H", nb = 1025), line 935 in "mod_mime_magic.c"
magic_process(r = 0x80cb1e0  [ 5]), line 915 in "mod_mime_magic.c"
magic_find_ct(r = 0x80cb1e0  [ 6]), line 2525 in "mod_mime_magic.c"
$b164, line 341 in "http_config.c"
$b163, line 341 in "http_config.c"
run_method(r = 0x80cb1e0  [ 7], offset = 16, run_all = 0), line 341 in "http_config.c"
find_types(r = 0x80cb1e0  [ 8]), line 360 in "http_config.c"
$b36, line 730 in "http_request.c"
sub_req_lookup_file(new_file = "http-analyze1_9e_tar.gz", r = 0x80c41e4  [ 9]), line 730 in "http_request.c"
				^^^^^^^^^^^^^^^^^^^^^^^
				This is the file (note: no dot before "tar.gz")
$b112, line 615 in "mod_autoindex.c"
make_autoindex_entry(name = "http-analyze1_9e_tar.gz", autoindex_opts = 1, d = 0x80c9960  [10], r = 0x80c41e4  [11]), line 615 in "mod_autoindex.c"
index_directory(r = 0x80c41e4  [12], autoindex_conf = 0x80c9960  [13]), line 861 in "mod_autoindex.c"
handle_autoindex(r = 0x80c41e4  [14]), line 921 in "mod_autoindex.c"
$b168, line 409 in "http_config.c"
$b167, line 409 in "http_config.c"
$b166, line 409 in "http_config.c"
invoke_handler(r = 0x80c41e4  [15]), line 409 in "http_config.c"
process_request_internal(r = 0x80c41e4  [16]), line 1032 in "http_request.c"
process_request(r = 0x80c41e4  [17]), line 1048 in "http_request.c"
child_main() at 0x804e254
make_child() at 0x804e394
.crtn._fini() at 0x80ab880
.crtn._fini() at 0x80ab880
.crtn._fini() at 0x80ab880
.crtn._fini() at 0x80ab880
.crtn._fini() at 0x80ab880
.crtn._fini() at 0x80ab880

If I can help any further, please let me know.

    Martin
-- 
| S I E M E N S |  <Ma...@mch.sni.de>  |      Siemens Nixdorf
| ------------- |   Voice: +49-89-636-46021     |  Informationssysteme AG
| N I X D O R F |   FAX:   +49-89-636-44994     |   81730 Munich, Germany
~~~~~~~~~~~~~~~~My opinions only, of course; pgp key available on request