httpd-24483

Version:

2.0.49

Failure report:

https://issues.apache.org/bugzilla/show_bug.cgi?id=24483

Symptom:

Crash

Can we reproduce the failure?

We didn’t reproduce the failure.

Root cause:

NULL pointer dereference.

static int spot_cookie(request_rec *r) {

   … ...

   if ((cookie_header = apr_table_get(r->headers_in, "Cookie"))) {

       /* dcfg->regexp == NULL */

       if (!ap_regexec(dcfg->regexp, cookie_header, NUM_SUBS, regm, 0)) {

           … ...

}

int

regexec(regex_t *preg, const char *string, size_t nmatch,

 regmatch_t pmatch[], int eflags)

{

/**crash here, since preg is NULL, deferencing it will seg fault!**/

rc = pcre_exec(preg->re_pcre, NULL, string, (int)strlen(string), 0, options,

 ovector, nmatch * 3);

...

}

Is there any log message?

Yes.

Can Errlog anticipate the Error?

Yes. By print an error msg and BT within the SIGSEGV handler.