[AXIS2C-1167] potential invalid read in axis2_http_header_create_by_str

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.4.0
• Fix Version/s: 1.4.1
• Component/s: transport/http
• Environment: linux fc6
• Assignee: Korale Gamaralalage Nandika Chandrasiri Jayawardana
• Reporter: Frederic Heem
• Created: 30/May/08 09:00
• Updated: 03/Jun/08 08:35
• Resolved: 03/Jun/08 08:35

Description

In the function axis2_http_header_create_by_str() at line 74, if the length of the variable tmp_str is less than 2, "axutil_strlen(tmp_str) - 2" becomes negative so tmp_str[axutil_strlen(tmp_str) - 2] points to somewhere it shouldn't