httpd-24483

Version:

2.0.49

Failure report:

Symptom:

Crash

Can we reproduce the failure?

We didn’t reproduce the failure.

Root cause:

NULL pointer dereference.

static int spot_cookie(request_rec *r) {

… ...

if ((cookie_header = apr_table_get(r->headers_in, "Cookie"))) {

/* dcfg->regexp == NULL */

if (!ap_regexec(dcfg->regexp, cookie_header, NUM_SUBS, regm, 0)) {

… ...

}

int

regexec(regex_t *preg, const char *string, size_t nmatch,

regmatch_t pmatch[], int eflags)

{

…

/**crash here, since preg is NULL, deferencing it will seg fault!**/

rc = pcre_exec(preg->re_pcre, NULL, string, (int)strlen(string), 0, options,

ovector, nmatch * 3);

...

}

Is there any log message?

Yes.

Can Errlog anticipate the Error?

Yes. By print an error msg and BT within the SIGSEGV handler.