[AXIS2C-1608] Segmentation fault when HTTP request includes multiple cookies in a cookie HTTP-header

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.7.0
• Fix Version/s: 1.7.0
• Component/s: transport/http
• Environment: Linux Debian, Axis2/c version 1.7.0-RC5 built from source , on top of Apache 2.2.16
• Assignee: Unassigned
• Reporter: Zvika Ferentz
• Created: 07/Nov/12 17:10
• Updated: 07/Apr/20 19:36

Description

Greetings,
We've noticed that when Axis2/C accepts a request with more than a single cookie - the apache crashes (segfault) .
If the cookies are sent via multiple cookie-headers then everything seems to be ok . We have tested it with multiple 1.7 release-candidate and the behavior is the same. When tested with 1.6.0 everything seems to be ok as well.

For example, Here is a request that crashed the server:
GET /ws/services/ HTTP/1.1
Host: 10.10.3.58
Connection: keep-alive
Cache-Control: max-age=0
Authorization: Basic YWRtaW46YTEgfmAkJiInPD4v
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.94 Safari/537.4
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: PHPSESSID=n3luspdq3oo6c8g6rhjv4sqgk5; webpy_session_id=fe06cdaf9f6d0acb635c6177e7b6c4f44841f447

Any idea ?
thank you very much
Z.