[Libevent-users] Crash in httpd

[Nisan Bloch ­ Clickatell]

Hi

If one is using the http server module in libevent1.3b, sending malformed
headers causes a segfault.
This is easy to replicate, just telnet to the httpd port and type some junk.

 Here is a back trace
#0  0x0040e43e in evhttp_handle_request (req=0x0, arg=0x82696a8) at
http.c:1242
#1  0x0040f011 in evhttp_connection_fail (evcon=0x8268cb0) at http.c:333
#2  0x0040f262 in evhttp_read_header (fd=25, what=2, arg=0x8268cb0) at
http.c:949
#3  0x0040af84 in event_base_loop (base=0x8268398, flags=Variable "flags" is
not available.
) at event.c:309
#4  0x0040b165 in event_loop (flags=136746664) at event.c:358
#5  0x0040b189 in event_dispatch () at event.c:321
#6  0x080505b6 in ServerMain (pSrvConfig=0x8220400) at ServerMain.c:125
#7  0x0804eeba in main (argc=1, argv=0xbffffaa4) at main.c:286
(gdb) 


I am not sure whether this should be patched in evhttp_handle_request  or
evhttp_connection_fail .



Thanks


Nisan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://monkeymail.org/archives/libevent-users/attachments/20070522/dc51f349/attachment.htm