Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 May 2010 22:00:15 GMT
From:      Benno Overeinder <benno@NLnetLabs.nl>
To:        apache@FreeBSD.org
Subject:   Re: ports/146393: www/apache20: apache-2.0.63_8 can't start
Message-ID:  <201005122200.o4CM0FMD004851@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help
The following reply was made to PR ports/146393; it has been noted by GNATS.

From: Benno Overeinder <benno@NLnetLabs.nl>
To: bug-followup@FreeBSD.org, stb@lassitu.de
Cc:  
Subject: Re: ports/146393: www/apache20: apache-2.0.63_8 can't start
Date: Wed, 12 May 2010 23:53:21 +0200

 Same problem here.  After some searchig after mySrvFromConn, and
 checking with the original Apache 2.0.63 sources, I figured out it must
 be in the patches of the port.  Indeed, in
 www/apache20/files/patch-CVE-2009-3555 there is the code injecting the
 line "s = mySrvFromConn(c);".
 
 According to the header, it is:
 "Modified patch from
 http://www.apache.org/dist/httpd/patches/apply_to_2.2.14/CVE-2009-3555-2.2.patch".
 
 In the original apache2.0.63 code there is no reference to
 mySrvFromConn, and in the other port patches I cannot find any line
 defining mySrvFromConn.  Is this a partial backport of CVE-2009-3555?
 
 Cheers,
 
 -- Benno



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201005122200.o4CM0FMD004851>