You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "Alan M. Carroll (Created) (JIRA)" <ji...@apache.org> on 2011/11/02 14:47:32 UTC
[jira] [Created] (TS-1010) strlcpy breaks WCCP Security
strlcpy breaks WCCP Security
----------------------------
Key: TS-1010
URL: https://issues.apache.org/jira/browse/TS-1010
Project: Traffic Server
Issue Type: Bug
Components: Network
Affects Versions: 3.1.0
Reporter: Alan M. Carroll
Assignee: Alan M. Carroll
The requirements for WCCP security key handling are precisely those of strncpy -
* The buffer must be zero padded.
* The terminating nul must *not* be copied if the key fills the buffer.
Rather than doing something complex with strlcpy to satisfy these requirements it is much easier to simply use strncpy.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (TS-1010) strlcpy breaks WCCP Security
Posted by "Alan M. Carroll (Resolved) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-1010?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Alan M. Carroll resolved TS-1010.
---------------------------------
Resolution: Fixed
Fix Version/s: 3.1.1
Changed back to strncpy.
> strlcpy breaks WCCP Security
> ----------------------------
>
> Key: TS-1010
> URL: https://issues.apache.org/jira/browse/TS-1010
> Project: Traffic Server
> Issue Type: Bug
> Components: Network
> Affects Versions: 3.1.0
> Reporter: Alan M. Carroll
> Assignee: Alan M. Carroll
> Labels: wccp
> Fix For: 3.1.1
>
>
> The requirements for WCCP security key handling are precisely those of strncpy -
> * The buffer must be zero padded.
> * The terminating nul must *not* be copied if the key fills the buffer.
> Rather than doing something complex with strlcpy to satisfy these requirements it is much easier to simply use strncpy.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira