PQ51952: IHS PLUGIN, GETTING BUFFER OVERFLOW ERRORS. GARBAGE IS IN THE HTTP REQUEST.

APAR status
Closed as program error.

Error description
When using ihs and the plugin, getting buffer overflow errors
where garbage is in the http request, in ihsaccess log and il
legal exceptions in websphere log.
-------
Defect  108608
Local fix Problem summary
****************************************************************
* USERS AFFECTED: All WebSphere Application Server users of    *
*                 IHS and the plugin.                          *
****************************************************************
* PROBLEM DESCRIPTION: Buffer overflow errors when using IHS   *
*                      and the plugin.                         *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
The plugin currently calls the Apache API ap_client_get_block()
giving the buf to read into and the length to read in order
to get the POST content.  This call does not guarantee that
it will read the full length passed in.  When the full length
is not obtained on the first read, the code needs to call it
again to read the remainder.  This can be done with a simple
loop and some pointer arithmetic.
Problem conclusion
Code has been changed in:
native/http_plugins/apache/mod_app_server_http.c
Temporary fix Comments
APAR information
APAR number PQ51952
Reported component name WEBSPHERE AES S
Reported component ID 5630A2302
Reported release 400
Status CLOSED PER
PE NoPE
HIPER NoHIPER
Submitted date 2001-08-29
Closed date 2001-08-31
Last modified date 2001-09-06

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Modules/Macros

Fix information
Fixed component name WEBSPHERE AES S
Fixed component ID 5630A2302

Applicable component levels
R400 PSY    UP


Document Information


Product categories: Software > Application Servers > Distributed Application & Web Servers > WebSphere Application Server > General
Operating system(s):
Software version: 400
Software edition:
Reference #: PQ51952
IBM Group: Software Group
Modified date: Sep 6, 2001