[prev in list] [next in list] [prev in thread] [next in thread]
List: apache-modperl
Subject: Re: SIGSEGV crash due to undefined behaviour when calling perl_parse
From: Charles Pigott <cpigott () rapitasystems ! com>
Date: 2021-02-22 15:02:51
Message-ID: LO4P123MB47518FAA6D3BCB7340F3645BAE819 () LO4P123MB4751 ! GBRP123 ! PROD ! OUTLOOK ! COM
[Download RAW message or body]
Thanks very much!
Charles
________________________________
From: Steve Hay <steve.m.hay@googlemail.com>
Sent: 22 February 2021 14:25
To: Charles Pigott <cpigott@rapitasystems.com>
Cc: modperl@perl.apache.org <modperl@perl.apache.org>
Subject: Re: SIGSEGV crash due to undefined behaviour when calling perl_parse
On Fri, 19 Feb 2021 at 09:25, Charles Pigott <cpigott@rapitasystems.com> wrote:
>
>
> Hi,
>
> TL;DR: mod_perl is using perl_parse() incorrectly and not NULL-terminating the argv \
> array passed to it.
> I've attached my suggested patch.
Thanks for the patch. I've committed this to the mod_perl trunk
(https://svn.apache.org/viewvc?view=revision&revision=1886793) so it
will appear in the next release (2.0.12).
--
Register for our online DO-178C & Multicore training with ConsuNova: 8-12th March \
2021<https://www.rapitasystems.com/training/DO178C/?utm_source=email_footer>.
[Attachment #3 (text/html)]
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} \
</style> </head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; \
color: rgb(0, 0, 0);"> Thanks very much!</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; \
color: rgb(0, 0, 0);"> <br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; \
color: rgb(0, 0, 0);"> Charles<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" \
style="font-size:11pt" color="#000000"><b>From:</b> Steve Hay \
<steve.m.hay@googlemail.com><br> <b>Sent:</b> 22 February 2021 14:25<br>
<b>To:</b> Charles Pigott <cpigott@rapitasystems.com><br>
<b>Cc:</b> modperl@perl.apache.org <modperl@perl.apache.org><br>
<b>Subject:</b> Re: SIGSEGV crash due to undefined behaviour when calling \
perl_parse</font> <div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">On Fri, 19 Feb 2021 at 09:25, Charles Pigott \
<cpigott@rapitasystems.com> wrote:<br> ><br>
><br>
> Hi,<br>
><br>
> TL;DR: mod_perl is using perl_parse() incorrectly and not NULL-terminating the \
argv array passed to it.<br> ><br>
> I've attached my suggested patch.<br>
<br>
Thanks for the patch. I've committed this to the mod_perl trunk<br>
(<a href="https://svn.apache.org/viewvc?view=revision&revision=1886793">https://svn.apache.org/viewvc?view=revision&revision=1886793</a>) \
so it<br> will appear in the next release (2.0.12).<br>
</div>
</span></font></div>
-- <br>
<br>
<span style="font-size:12pt;"><a \
href="https://www.rapitasystems.com/training/DO178C/?utm_source=email_footer">Register \
for our online DO-178C & Multicore training with ConsuNova: 8-12th March \
2021</a>.</span> </body>
</html>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic