Uploaded image for project: 'Axis2-C'
  1. Axis2-C
  2. AXIS2C-1608

Segmentation fault when HTTP request includes multiple cookies in a cookie HTTP-header

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 1.7.0
    • Fix Version/s: 1.7.0
    • Component/s: transport/http
    • Labels:
      None
    • Environment:
      Linux Debian, Axis2/c version 1.7.0-RC5 built from source , on top of Apache 2.2.16

      Description

      Greetings,
      We've noticed that when Axis2/C accepts a request with more than a single cookie - the apache crashes (segfault) .
      If the cookies are sent via multiple cookie-headers then everything seems to be ok . We have tested it with multiple 1.7 release-candidate and the behavior is the same. When tested with 1.6.0 everything seems to be ok as well.

      For example, Here is a request that crashed the server:
      GET /ws/services/ HTTP/1.1
      Host: 10.10.3.58
      Connection: keep-alive
      Cache-Control: max-age=0
      Authorization: Basic YWRtaW46YTEgfmAkJiInPD4v
      User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.94 Safari/537.4
      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
      Accept-Encoding: gzip,deflate,sdch
      Accept-Language: en-US,en;q=0.8
      Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
      Cookie: PHPSESSID=n3luspdq3oo6c8g6rhjv4sqgk5; webpy_session_id=fe06cdaf9f6d0acb635c6177e7b6c4f44841f447

      Any idea ?
      thank you very much
      Z.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              zferentz Zvika Ferentz
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: