Ticket #1476 (new defect)

Opened 9 months ago

1.5 r-1992 overflow when parsing "remoteip conditions"

Reported by: class101 Owned by: jan
Priority: high Milestone: 1.5.0
Component: core Version: 1.5.x-svn
Severity: normal Keywords: config overflow
Cc: Blocked By:
Need User Feedback: yes Blocking:

Description

I have found a bug type like overflow that is crashing the lighttpd.

#$HTTP["remoteip"] !~ "65.52.0.0/14|66.249.64.0/19|74.125.0.0/16|216.239.32.0/19|64.233.160.0/19|
#                      72.14.192.0/18|66.102.0.0/20|66.94.224.0/19|202.160.176.0/20|
#                      209.131.32.0/19|209.191.64.0/18|209.73.160.0/19|216.109.112.0/20|216.155.192.0/20|
#                      66.196.64.0/18|66.94.224.0/19|68.142.192.0/18|72.30.0.0/16|74.6.0.0/16" {
#  access.deny-all = "enable"
#}

The lighty will startup fine but the first TCP connection to the listening port (80) is crashing the lighttpd binary leaving my spawn-fcgi process alones

I'm actually using a workaround wich looks like

$HTTP["remoteip"] != "***.***.0.0/12" {
 $HTTP["remoteip"] != "65.52.0.0/14" { 
 $HTTP["remoteip"] != "66.249.64.0/19" {
 $HTTP["remoteip"] != "66.249.64.0/19" {
 $HTTP["remoteip"] != "74.125.0.0/16" {
 $HTTP["remoteip"] != "74.125.0.0/16" {
 $HTTP["remoteip"] != "74.125.0.0/16" {
 $HTTP["remoteip"] != "216.239.32.0/19" {
 $HTTP["remoteip"] != "64.233.160.0/19" {
 $HTTP["remoteip"] != "72.14.192.0/18" {
 $HTTP["remoteip"] != "66.102.0.0/20" {
 $HTTP["remoteip"] != "66.94.224.0/19" {
 $HTTP["remoteip"] != "202.160.176.0/20" {
 $HTTP["remoteip"] != "209.131.32.0/19" {
 $HTTP["remoteip"] != "209.191.64.0/18" {
 $HTTP["remoteip"] != "209.73.160.0/19" {
 $HTTP["remoteip"] != "216.109.112.0/20" {
 $HTTP["remoteip"] != "216.155.192.0/20" {
 $HTTP["remoteip"] != "66.196.64.0/18" {
 $HTTP["remoteip"] != "68.142.192.0/18" {
 $HTTP["remoteip"] != "72.30.0.0/16" {
 $HTTP["remoteip"] != "74.6.0.0/16" {
  access.deny-all = "enable"
}
}
}
}
}
}
}
}
}
}
}
}
}
}
}
}
}
}
}
}
}
}

A bit ugly :)

Attachments

Add/Change #1476 (1.5 r-1992 overflow when parsing "remoteip conditions")

Author



Change Properties
<Author field>
Action
as new
 
Note: See TracTickets for help on using tickets.