You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2008/05/28 07:02:23 UTC
DO NOT REPLY [Bug 45085] New: A potential bug discovered by a static
program analysis approach
https://issues.apache.org/bugzilla/show_bug.cgi?id=45085
Summary: A potential bug discovered by a static program analysis
approach
Product: Apache httpd-2
Version: 2.2.8
Platform: All
OS/Version: Windows XP
Status: NEW
Severity: normal
Priority: P3
Component: Core
AssignedTo: bugs@httpd.apache.org
ReportedBy: rxc92@case.edu
File Name: /server/util_md5.c
Function Nam: ap_md5digest()
Buggy Code:
169: apr_file_seek(infile, APR_SET, &offset);
170: return ap_md5contextTo64(p, &context);
File Name: /support/htcacheclean.c
Function Nam: process_dir()
Buggy Code:
461: apr_file_seek(fd, APR_SET, &offset);
Description: A rule discovered by our static program analysis approach
indicates that an error occurs if apr_file_seek() outputs “!APR_SUCCESS”.
The outputs of apr_file_seek() are not checked in the above code.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
DO NOT REPLY [Bug 45085] A potential bug discovered by a static
program analysis approach
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=45085
Nick Kew <ni...@webthing.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |LATER
--- Comment #1 from Nick Kew <ni...@webthing.com> 2008-05-28 13:15:50 PST ---
Technically it's a bug. But it's only a file rewind: a side-effect, and one
where failures are most unlikely. A fix would require an API change, which
isn't going to happen anytime soon. Closing LATER, though WONTFIX might be
more realistic.
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org