Thanks Seema i will take a look.

What kind of effect are you seeing ? any error message ?

Thanks

Breno

On Tue, Jul 24, 2012 at 7:52 AM, seema deepak <seema.deepak@gmail.com> wrote:
Hi,

I came across a bug while using ModSecurity 2.6.5 with our server.
Multipart code tries to close the descriptor more than once; once in multipart_process_boundary() and again in multipart_cleanup().

Below change in multipart_process_boundary() fixed the issue.
================================
--- modsecurity-apache/apache2/msc_multipart.c Fri Jul 20 06:08:39 2012 -0700
+++ modsecurity-apache/apache2/msc_multipart.c Fri Jul 20 06:11:42 2012 -0700
@@ -581,6 +581,7 @@
&&(msr->mpd->mpp->tmp_file_fd != 0))
         {
             close(msr->mpd->mpp->tmp_file_fd);
+            msr->mpd->mpp->tmp_file_fd = -1;
         }
================================

I don't know if this has already been fixed in the latest version.

Thanks and Regards,
Seema.
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
mod-security-developers mailing list
mod-security-developers@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-developers
ModSecurity Services from Trustwave's SpiderLabs:
https://www.trustwave.com/spiderLabs.php