[Mod-security-developers] Bug in msc_multipart.c
Brought to you by:
victorhora,
zimmerletw
|
From: seema d. <see...@gm...> - 2012-07-24 12:53:05
|
Hi,
I came across a bug while using ModSecurity 2.6.5 with our server.
Multipart code tries to close the descriptor more than once; once in
multipart_process_boundary() and again in multipart_cleanup().
Below change in multipart_process_boundary() fixed the issue.
================================
--- modsecurity-apache/apache2/msc_multipart.c Fri Jul 20 06:08:39 2012
-0700
+++ modsecurity-apache/apache2/msc_multipart.c Fri Jul 20 06:11:42 2012
-0700
@@ -581,6 +581,7 @@
&&(msr->mpd->mpp->tmp_file_fd != 0))
{
close(msr->mpd->mpp->tmp_file_fd);
+ msr->mpd->mpp->tmp_file_fd = -1;
}
================================
I don't know if this has already been fixed in the latest version.
Thanks and Regards,
Seema.
|