buglwIP - A Lightweight TCP/IP stack - Bugs: bug #53959, HTTPD SSI bug when tag crosses...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #53959: HTTPD SSI bug when tag crosses block boundary

Submitter:  Szabolcs Szekelyi <szekelyisz>
Submitted:  Tue 22 May 2018 02:59:25 PM UTC
   
 
Category:  apps Severity:  3 - Normal
Item Group:  Faulty Behaviour Status:  Duplicate
Privacy:  Public Assigned to:  None
Open/Closed:  Closed Planned Release:  None
lwIP version:  2.0.3

Tue 22 May 2018 07:12:54 PM UTC, comment #1: 

Thanks for reporting, but this is a duplicate to bug #53339

Simon Goldschmidt <goldsimon>
Group administrator
Tue 22 May 2018 02:59:25 PM UTC, original submission:  

Processing SSI tags goes completely wrong when the end of the buffer is in the middle of a tag in http_send_data_ssi().

The main problem is that in this case, when the processing of the new block starts, ssi->tag_start points to the beginning of the tag that started somewhere close to end of the previous buffer whereas hs->file points to the beginning of the new block, but the code has no idea about the buffers being different. So it thinks that the tag started somewhere close to the end of the current buffer, and since hs->file points to the beginning, it sends almost the whole buffer without any processing.

Szabolcs Szekelyi <szekelyisz>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by goldsimon (Posted a comment)
  • -email is unavailable- added by szekelyisz (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2018-05-22 goldsimon StatusNone Duplicate
        Open/ClosedOpen Closed

    Back to the top

    Powered by Savane 3.13-d3ae.
    Corresponding source code