<HTML>
<HEAD>
<TITLE>Crash in httpd</TITLE>
</HEAD>
<BODY>
<FONT FACE="Verdana, Helvetica, Arial"><SPAN STYLE='font-size:12.0px'>Hi<BR>
<BR>
If one is using the http server module in libevent1.3b, sending malformed headers causes a segfault. <BR>
This is easy to replicate, just telnet to the httpd port and type some junk.<BR>
<BR>
Here is a back trace<BR>
#0 0x0040e43e in evhttp_handle_request (req=0x0, arg=0x82696a8) at http.c:1242<BR>
#1 0x0040f011 in evhttp_connection_fail (evcon=0x8268cb0) at http.c:333<BR>
#2 0x0040f262 in evhttp_read_header (fd=25, what=2, arg=0x8268cb0) at http.c:949<BR>
#3 0x0040af84 in event_base_loop (base=0x8268398, flags=Variable "flags" is not available.<BR>
) at event.c:309<BR>
#4 0x0040b165 in event_loop (flags=136746664) at event.c:358<BR>
#5 0x0040b189 in event_dispatch () at event.c:321<BR>
#6 0x080505b6 in ServerMain (pSrvConfig=0x8220400) at ServerMain.c:125<BR>
#7 0x0804eeba in main (argc=1, argv=0xbffffaa4) at main.c:286<BR>
(gdb) <BR>
<BR>
<BR>
I am not sure whether this should be patched in evhttp_handle_request or evhttp_connection_fail .<BR>
<BR>
<BR>
<BR>
Thanks<BR>
<BR>
<BR>
Nisan</SPAN></FONT>
</BODY>
</HTML>