You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2016/10/31 21:23:50 UTC

[Bug 60324] New: Memory corruption when using REST URI

https://bz.apache.org/bugzilla/show_bug.cgi?id=60324

            Bug ID: 60324
           Summary: Memory corruption when using REST URI
           Product: Apache httpd-2
           Version: 2.4.6
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: critical
          Priority: P2
         Component: All
          Assignee: bugs@httpd.apache.org
          Reporter: prabhuas@gmail.com
  Target Milestone: ---

Hi,
I am developing REST support for our firmware using Apache 2.4.6 version. When
I try to provide the REST URI, I am getting this segmentiaton fault. I decoded
the core dump and shared the BT with apache trace8 logs. I could see this crash
happened only when the input goes more than 40 chars with many forward slashes
are given ("/"). If we just provide lesser number of URI resources, it does not
crash. 

As request_rec is corrupted in ap_process_request_internal(), it tried to
allocate big chunk of memory which leads to signal 6 abort. Can you please
check and let me know if there is any potential issue in this version? I have
also provided the logs for the working case where the request is transered to
the dispatcher module.  



#5  0x0fee3d54 in apr_pstrmemdup (a=0x0, s=0xfffffff8 <Address 0xfffffff8 out
of bounds>, n=269454880)
    at strings/apr_strings.c:106
#6  0x0f6735d8 in ?? () from ./oss/usr/apache/libexec/mod_alias.so
#7  0x0f673a6c in ?? () from ./oss/usr/apache/libexec/mod_alias.so
#8  0x1003680c in ap_run_translate_name (r=0x5) at request.c:77     --> Check
the request_rec value which is wrong. 
#9  0x100393b8 in ap_process_request_internal (r=0x100f8e78) at request.c:173 
--> Here request_rec (r) is correct. 

HTTPD conf:
AliasMatch /rest* /apache/webd


URI:
GET: http://10.38.18.77/rest/running/config/port/port-name/user_portnumber_12


Trace8 logs: 

[Mon Oct 31 14:44:49.831406 2016] [core:trace5] [pid 14201] protocol.c(616):
[client 10.120.62.206:63119] Request received from client: GET
/rest/running/config/port/port-name/user_portnumber_12 HTTP/1.1
[Mon Oct 31 14:44:49.831516 2016] [http:trace4] [pid 14201]
http_request.c(300): [client 10.120.62.206:63119] Headers received from client:
[Mon Oct 31 14:44:49.831534 2016] [http:trace4] [pid 14201]
http_request.c(303): [client 10.120.62.206:63119]   Host: 10.38.18.77
[Mon Oct 31 14:44:49.831547 2016] [http:trace4] [pid 14201]
http_request.c(303): [client 10.120.62.206:63119]   Connection: keep-alive
[Mon Oct 31 14:44:49.831561 2016] [http:trace4] [pid 14201]
http_request.c(303): [client 10.120.62.206:63119]   Authorization: Basic
cm9vdDpwYXNzd29yZA==
[Mon Oct 31 14:44:49.831574 2016] [http:trace4] [pid 14201]
http_request.c(303): [client 10.120.62.206:63119]   Cache-Control: no-cache
[Mon Oct 31 14:44:49.831588 2016] [http:trace4] [pid 14201]
http_request.c(303): [client 10.120.62.206:63119]   User-Agent: Mozilla/5.0
(Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/52.0.2743.116 Safari/537.36
[Mon Oct 31 14:44:49.831603 2016] [http:trace4] [pid 14201]
http_request.c(303): [client 10.120.62.206:63119]   Postman-Token:
370db150-cfe1-4bc9-0c39-c0aced40cec0
[Mon Oct 31 14:44:49.831629 2016] [http:trace4] [pid 14201]
http_request.c(303): [client 10.120.62.206:63119]   Accept: */*
[Mon Oct 31 14:44:49.831643 2016] [http:trace4] [pid 14201]
http_request.c(303): [client 10.120.62.206:63119]   Accept-Encoding: gzip,
deflate, sdch
[Mon Oct 31 14:44:49.831656 2016] [http:trace4] [pid 14201]
http_request.c(303): [client 10.120.62.206:63119]   Accept-Language:
en-US,en;q=0.8
[Mon Oct 31 14:44:49.831694 2016] [rewrite:trace2] [pid 14201]
mod_rewrite.c(468): [client 10.120.62.206:63119] 10.120.62.206 - -
[localhost/sid#100b2eb8][rid#1010aeb8/initial] init rewrite engine with
requested uri /rest/running/config/port/port-name/user_portnumber_12
[Mon Oct 31 14:44:49.831717 2016] [rewrite:trace3] [pid 14201]
mod_rewrite.c(468): [client 10.120.62.206:63119] 10.120.62.206 - -
[localhost/sid#100b2eb8][rid#1010aeb8/initial] applying pattern '.*' to uri
'/rest/running/config/port/port-name/user_portnumber_12'
[Mon Oct 31 14:44:49.831755 2016] [rewrite:trace4] [pid 14201]
mod_rewrite.c(468): [client 10.120.62.206:63119] 10.120.62.206 - -
[localhost/sid#100b2eb8][rid#1010aeb8/initial] RewriteCond: input='GET'
pattern='^TRACE' => not-matched
[Mon Oct 31 14:44:49.831776 2016] [rewrite:trace1] [pid 14201]
mod_rewrite.c(468): [client 10.120.62.206:63119] 10.120.62.206 - -
[localhost/sid#100b2eb8][rid#1010aeb8/initial] pass through
/rest/running/config/port/port-name/user_portnumber_12
[crit] Memory allocation failed, aborting process.
[Mon Oct 31 14:44:50.289368 2016] [core:notice] [pid 14198] AH00051: child pid
14201 exit signal Aborted (6), possible coredump in /tmp
[Mon Oct 31 14:44:50.289440 2016] [core:trace4] [pid 14198] mpm_common.c(526):
mpm child 14201 (gen 0/slot 0) exited

Coredump:
=========

Core was generated by `/usr/apache/bin/httpd.0 -f /apache/httpd.conf.0'.
Program terminated with signal 6, Aborted.
#0  0x0fce3d64 in *__GI_raise (sig=6) at
../nptl/sysdeps/unix/sysv/linux/raise.c:67
67      ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
        in ../nptl/sysdeps/unix/sysv/linux/raise.c
(gdb) bt
#0  0x0fce3d64 in *__GI_raise (sig=6) at
../nptl/sysdeps/unix/sysv/linux/raise.c:67
#1  0x0fce9260 in *__GI_abort () at abort.c:88
#2  0x100216b4 in ap_abort_on_oom () at util.c:2859
#3  0x1001f280 in abort_on_oom (retcode=0) at main.c:272
#4  0x0fef04fc in apr_palloc (pool=0x100f8e38, in_size=6534) at
memory/unix/apr_pools.c:698
#5  0x0fee3d54 in apr_pstrmemdup (a=0x0, s=0xfffffff8 <Address 0xfffffff8 out
of bounds>, n=269454880)
    at strings/apr_strings.c:106
#6  0x0f6735d8 in ?? () from ./oss/usr/apache/libexec/mod_alias.so
#7  0x0f673a6c in ?? () from ./oss/usr/apache/libexec/mod_alias.so
#8  0x1003680c in ap_run_translate_name (r=0x5) at request.c:77
#9  0x100393b8 in ap_process_request_internal (r=0x100f8e78) at request.c:173
#10 0x10057dac in ap_process_async_request (r=0x100f8e78) at http_request.c:315
#11 0x10057ff8 in ap_process_request (r=0x0) at http_request.c:363
#12 0x100541cc in ap_process_http_connection (c=0x100f22c8) at http_core.c:190
#13 0x1004af38 in ap_run_process_connection (c=0x100f22c8) at connection.c:41
#14 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#15 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#16 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#17 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#18 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#19 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#20 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#21 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
Previous frame inner to this frame (corrupt stack?)
(gdb) fr 9
#9  0x100393b8 in ap_process_request_internal (r=0x100f8e78) at request.c:173
173     request.c: No such file or directory.
        in request.c
(gdb) p *r
$7 = {pool = 0x100f8e38, connection = 0x100f22c8, server = 0x100b2eb8, next =
0x0, prev = 0x0, main = 0x0, 
  the_request = 0x100f9a80 "GET
/rest/running/config/port/port-name/user_portnumber_12 HTTP/1.1", assbackwards
= 0, 
  proxyreq = 0, header_only = 0, proto_num = 1001, protocol = 0x100f9b78
"HTTP/1.1", hostname = 0x100f9d78 "10.38.18.77", 
  request_time = 1477914526727398, status_line = 0x0, status = 200,
method_number = 0, method = 0x100f9ac8 "GET", 
  allowed = 0, allowed_xmethods = 0x0, allowed_methods = 0x100f9028,
sent_bodyct = 0, bytes_sent = 0, mtime = 0, 
  range = 0x0, clength = 0, chunked = 0, read_body = 0, read_chunked = 0,
expecting_100 = 0, kept_body = 0x0, 
  body_table = 0x0, remaining = 0, read_length = 0, headers_in = 0x100f9058,
headers_out = 0x100f94e8, 
  err_headers_out = 0x100f9690, subprocess_env = 0x100f92a0, notes =
0x100f97e8, content_type = 0x0, handler = 0x0, 
  content_encoding = 0x0, content_languages = 0x0, vlist_validator = 0x0, user
= 0x0, ap_auth_type = 0x0, 
  unparsed_uri = 0x100f9b08
"/rest/running/config/port/port-name/user_portnumber_12", 
  uri = 0x100f9b40 "/rest/running/config/port/port-name/user_portnumber_12", 
  filename = 0x100f9e08
"/rest/running/config/port/port-name/user_portnumber_12", canonical_filename =
0x0, 
  path_info = 0x0, args = 0x0, used_path_info = 2, eos_sent = 0, per_dir_config
= 0x100b4020, request_config = 0x100f9940, 
  log = 0x100b2ec8, log_id = 0x100f9f40 "EBPHD8pfvOY", htaccess = 0x0,
output_filters = 0x100f9a00, 
  input_filters = 0x100f9d88, proto_output_filters = 0x100f9a00,
proto_input_filters = 0x100f9d88, no_cache = 0, 
  no_local_copy = 0, invoke_mtx = 0x100f9da0, parsed_uri = {scheme = 0x0,
hostinfo = 0x0, user = 0x0, password = 0x0, 
    hostname = 0x0, port_str = 0x0, path = 0x100f9b40
"/rest/running/config/port/port-name/user_portnumber_12", 
    query = 0x0, fragment = 0x0, hostent = 0x0, port = 0, is_initialized = 1,
dns_looked_up = 0, dns_resolved = 0}, 
  finfo = {pool = 0x0, valid = 0, protection = 0, filetype = APR_NOFILE, user =
0, group = 0, inode = 0, device = 0, 
    nlink = 0, size = 0, csize = 0, atime = 0, mtime = 0, ctime = 0, fname =
0x0, name = 0x0, filehand = 0x0}, 
  useragent_addr = 0x100f2210, useragent_ip = 0x100f2530 "10.120.62.206"}
(gdb) thread apply all bt

Thread 1 (process 6534):
#0  0x0fce3d64 in *__GI_raise (sig=6) at
../nptl/sysdeps/unix/sysv/linux/raise.c:67
#1  0x0fce9260 in *__GI_abort () at abort.c:88
#2  0x100216b4 in ap_abort_on_oom () at util.c:2859
#3  0x1001f280 in abort_on_oom (retcode=0) at main.c:272
#4  0x0fef04fc in apr_palloc (pool=0x100f8e38, in_size=6534) at
memory/unix/apr_pools.c:698
#5  0x0fee3d54 in apr_pstrmemdup (a=0x0, s=0xfffffff8 <Address 0xfffffff8 out
of bounds>, n=269454880)
    at strings/apr_strings.c:106
#6  0x0f6735d8 in ?? () from ./oss/usr/apache/libexec/mod_alias.so
#7  0x0f673a6c in ?? () from ./oss/usr/apache/libexec/mod_alias.so
#8  0x1003680c in ap_run_translate_name (r=0x5) at request.c:77
#9  0x100393b8 in ap_process_request_internal (r=0x100f8e78) at request.c:173
#10 0x10057dac in ap_process_async_request (r=0x100f8e78) at http_request.c:315
#11 0x10057ff8 in ap_process_request (r=0x0) at http_request.c:363
#12 0x100541cc in ap_process_http_connection (c=0x100f22c8) at http_core.c:190
#13 0x1004af38 in ap_run_process_connection (c=0x100f22c8) at connection.c:41
#14 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#15 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#16 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#17 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#18 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#19 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#20 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
#21 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
(gdb) thread apply all bt full

Thread 1 (process 6534):
#0  0x0fce3d64 in *__GI_raise (sig=6) at
../nptl/sysdeps/unix/sysv/linux/raise.c:67
        r4 = 6534
        r7 = <value optimized out>
        r12 = <value optimized out>
        r5 = 6
        r8 = <value optimized out>
        r10 = <value optimized out>
        r0 = 250
        r3 = <value optimized out>
        r6 = <value optimized out>
        r9 = <value optimized out>
        r11 = <value optimized out>
        sc_ret = <value optimized out>
        pid = 0
        selftid = 6534
        res = <value optimized out>
#1  0x0fce9260 in *__GI_abort () at abort.c:88
        self = (void *) 0x6
        act = {__sigaction_handler = {sa_handler = 0x1008498c <ap_server_conf>, 
    sa_sigaction = 0x1008498c <ap_server_conf>}, sa_mask = {__val =
{1067480216, 258425212, 258425144, 1067479872, 
      1067479672, 4096, 269454968, 268969564, 268547144, 0, 269454880,
402788340, 402790016, 1067479488, 402710460, 
      264978960, 1067479672, 54, 269458240, 269454904, 269418592, 4294967288,
269454880, 268848312, 51, 1067479552, 
      402736308, 537011266, 16, 51, 268572288, 537011268}}, sa_flags = 51,
sa_restorer = 0xfd7e0fc <__write_nocancel+8>}
        sigs = {__val = {32, 0 <repeats 31 times>}}
#2  0x100216b4 in ap_abort_on_oom () at util.c:2859
        written = 0
        count = 51
        buf = 0x10064cb8 "[crit] Memory allocation failed, aborting process.\n"
#3  0x1001f280 in abort_on_oom (retcode=0) at main.c:272
No locals.
#4  0x0fef04fc in apr_palloc (pool=0x100f8e38, in_size=6534) at
memory/unix/apr_pools.c:698
---Type <return> to continue, or q <return> to quit---
        active = (apr_memnode_t *) 0x100f8e20
        node = (apr_memnode_t *) 0x100f8e20
        mem = <value optimized out>
        size = 4294967288
        free_index = <value optimized out>
#5  0x0fee3d54 in apr_pstrmemdup (a=0x0, s=0xfffffff8 <Address 0xfffffff8 out
of bounds>, n=269454880)
    at strings/apr_strings.c:106
        res = 0x100f8e20 "\020\017\216 \020\017\216 "
#6  0x0f6735d8 in ?? () from ./oss/usr/apache/libexec/mod_alias.so
No symbol table info available.
#7  0x0f673a6c in ?? () from ./oss/usr/apache/libexec/mod_alias.so
No symbol table info available.
#8  0x1003680c in ap_run_translate_name (r=0x5) at request.c:77
        n = 258524596
        rv = <value optimized out>
#9  0x100393b8 in ap_process_request_internal (r=0x100f8e78) at request.c:173
        file_req = 0
        access_status = 0
        d = (core_dir_config *) 0x100b4438
#10 0x10057dac in ap_process_async_request (r=0x100f8e78) at http_request.c:315
        c = (conn_rec *) 0x3fa07340
        access_status = <value optimized out>
#11 0x10057ff8 in ap_process_request (r=0x0) at http_request.c:363
        bb = <value optimized out>
        b = <value optimized out>
        c = (conn_rec *) 0x100f22c8
        rv = <value optimized out>
#12 0x100541cc in ap_process_http_connection (c=0x100f22c8) at http_core.c:190
No locals.
#13 0x1004af38 in ap_run_process_connection (c=0x100f22c8) at connection.c:41
        n = 1
        rv = <value optimized out>
#14 0x1005d39c in child_main (child_num_arg=<value optimized out>) at
prefork.c:704
---Type <return> to continue, or q <return> to quit---
        numdesc = 402710460
        pdesc = (const apr_pollfd_t *) 0xfcb8b80
        current_conn = (conn_rec *) 0x100f22c8
        csd = (void *) 0x100f2130
        thd = (apr_thread_t *) 0x100f0128
        osthd = Cannot access memory at address 0x199a
(gdb) 





Working case: 
============

URI: GET: http://10.38.18.77/rest/running/config/port/port/user





[Mon Oct 31 15:16:45.851022 2016] [core:trace5] [pid 14246] protocol.c(616):
[client 10.120.62.206:64648] Request received from client: GET
/rest/running/config/port/port/user HTTP/1.1
[Mon Oct 31 15:16:45.851136 2016] [http:trace4] [pid 14246]
http_request.c(300): [client 10.120.62.206:64648] Headers received from client:
[Mon Oct 31 15:16:45.851154 2016] [http:trace4] [pid 14246]
http_request.c(303): [client 10.120.62.206:64648]   Host: 10.38.18.77
[Mon Oct 31 15:16:45.851167 2016] [http:trace4] [pid 14246]
http_request.c(303): [client 10.120.62.206:64648]   Connection: keep-alive
[Mon Oct 31 15:16:45.851181 2016] [http:trace4] [pid 14246]
http_request.c(303): [client 10.120.62.206:64648]   Authorization: Basic
cm9vdDpwYXNzd29yZA==
[Mon Oct 31 15:16:45.851194 2016] [http:trace4] [pid 14246]
http_request.c(303): [client 10.120.62.206:64648]   Cache-Control: no-cache
[Mon Oct 31 15:16:45.851208 2016] [http:trace4] [pid 14246]
http_request.c(303): [client 10.120.62.206:64648]   User-Agent: Mozilla/5.0
(Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/52.0.2743.116 Safari/537.36
[Mon Oct 31 15:16:45.851223 2016] [http:trace4] [pid 14246]
http_request.c(303): [client 10.120.62.206:64648]   Postman-Token:
2746b1cb-9e3f-2d59-b468-638de397f10b
[Mon Oct 31 15:16:45.851237 2016] [http:trace4] [pid 14246]
http_request.c(303): [client 10.120.62.206:64648]   Accept: */*
[Mon Oct 31 15:16:45.851250 2016] [http:trace4] [pid 14246]
http_request.c(303): [client 10.120.62.206:64648]   Accept-Encoding: gzip,
deflate, sdch
[Mon Oct 31 15:16:45.851263 2016] [http:trace4] [pid 14246]
http_request.c(303): [client 10.120.62.206:64648]   Accept-Language:
en-US,en;q=0.8
[Mon Oct 31 15:16:45.851303 2016] [rewrite:trace2] [pid 14246]
mod_rewrite.c(468): [client 10.120.62.206:64648] 10.120.62.206 - -
[localhost/sid#100b2eb8][rid#1010cec0/initial] init rewrite engine with
requested uri /rest/running/config/port/port/user
[Mon Oct 31 15:16:45.851325 2016] [rewrite:trace3] [pid 14246]
mod_rewrite.c(468): [client 10.120.62.206:64648] 10.120.62.206 - -
[localhost/sid#100b2eb8][rid#1010cec0/initial] applying pattern '.*' to uri
'/rest/running/config/port/port/user'
[Mon Oct 31 15:16:45.851364 2016] [rewrite:trace4] [pid 14246]
mod_rewrite.c(468): [client 10.120.62.206:64648] 10.120.62.206 - -
[localhost/sid#100b2eb8][rid#1010cec0/initial] RewriteCond: input='GET'
pattern='^TRACE' => not-matched
[Mon Oct 31 15:16:45.851385 2016] [rewrite:trace1] [pid 14246]
mod_rewrite.c(468): [client 10.120.62.206:64648] 10.120.62.206 - -
[localhost/sid#100b2eb8][rid#1010cec0/initial] pass through
/rest/running/config/port/port/user
[Mon Oct 31 15:16:45.851490 2016] [authz_core:debug] [pid 14246]
mod_authz_core.c(799): [client 10.120.62.206:64648] AH01626: authorization
result of Require all granted: granted
[Mon Oct 31 15:16:45.851509 2016] [authz_core:debug] [pid 14246]
mod_authz_core.c(799): [client 10.120.62.206:64648] AH01626: authorization
result of <RequireAny>: granted
[Mon Oct 31 15:16:45.851522 2016] [core:trace3] [pid 14246] request.c(236):
[client 10.120.62.206:64648] request authorized without authentication by
access_checker_ex hook: /rest/running/config/port/port/user
sw0: Oct 31 15:16:45in webd.c, line 807
    Dispather while-uri:/rest/running/config/port/port/user

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 60324] Memory corruption when using REST URI

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60324

asp <pr...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|P2                          |P1
                 CC|                            |prabhuas@gmail.com

--- Comment #1 from asp <pr...@gmail.com> ---
Hi,
Please let me if there is any work around on it? 

Thanks
ASP

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 60324] Memory corruption when using REST URI

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60324

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO

--- Comment #2 from Eric Covener <co...@gmail.com> ---
Does it fail when you remove your module? Can you run under valgrind or
MALLOC_CHECK_=2 and see if it crashes/warns earlier?

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 60324] Memory corruption when using REST URI

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60324

--- Comment #4 from Eric Covener <co...@gmail.com> ---
(In reply to asp from comment #3)
> Yes Eric, it happens even after I removed my module from the AliasMatch. I
> tried to set the MALLOC_CHECK_=2 for apache server and the same crash is
> shown. I will try to get the valgrind logs asap.

There was a fix in 2.4.10:


  *) mod_alias: Stop setting CONTEXT_PREFIX and CONTEXT_DOCUMENT environment
     variables as a result of AliasMatch. [Eric Covener]


In this same neighborhood. Your AliasMatch seems to be similar to the ones that
were breaking things -- no capture and substitution at all. I don't know if
redhat backported never backported this fix, or if you just don't have their
maintenance -- but we can't take a report about problems in "2.4.6" here at the
ASF.  We're on 2.4.23.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 60324] Memory corruption when using REST URI

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60324

--- Comment #3 from asp <pr...@gmail.com> ---
Yes Eric, it happens even after I removed my module from the AliasMatch. I
tried to set the MALLOC_CHECK_=2 for apache server and the same crash is shown.
I will try to get the valgrind logs asap.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 60324] Memory corruption when using REST URI

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60324

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEEDINFO                    |RESOLVED
         Resolution|---                         |LATER

--- Comment #5 from Eric Covener <co...@gmail.com> ---
actual 2.4.6 is ancient, looks like an old/fixed mod_alias issue.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 60324] Memory corruption when using REST URI

Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=60324

--- Comment #6 from apktogel <su...@gmail.com> ---
anyone can help me settin my web https://139.59.254.191/ 
please im so confuse

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org