tree 86ee70837044eba091f5ab3b7bc437040ee518c9
parent f0d058e8aba2db2034754f02ec70050d69354279
author Willy Tarreau <w@1wt.eu> 1169851178 +0100
committer Willy Tarreau <w@1wt.eu> 1169851178 +0100

[CRITICAL] an empty header may lead to a crash

A missing pointer assignment in case of an empty header
will result in this header's length being 65535, causing
a SEGV when accessing the next header. It should not be
possible to exploit this problem to run arbitrary code
because the crash occurs while reading the data.