Skip Menu |
 

This queue is for tickets about the HTTP-Body CPAN distribution.

Report information
The Basics
Id: 105021
Status: open
Priority: 0/
Queue: HTTP-Body

People
Owner: Nobody in particular
Requestors: bill [...] hank.org
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: HTTP::Body fails to check for errors when writing temp files
Download (untitled) / with headers
text/plain 304b
Both HTTP::Body::Multipart and HTTP::Body::OctetStream write to temp files, but they fail to check the return value when writing to those file handles. Currently, HTTP::Body would ignore theses errors and continue as if everything is fine. This opens a potential DoS attack. Is HTTP::Body on Github?
Download (untitled) / with headers
text/plain 644b
On 2015-06-06 10:35:48, HANK wrote: Show quoted text
> Both HTTP::Body::Multipart and HTTP::Body::OctetStream write to temp > files, but they fail to check the return value when writing to those > file handles. Currently, HTTP::Body would ignore theses errors and > continue as if everything is fine. > > This opens a potential DoS attack. > > Is HTTP::Body on Github?
It's at git://git.shadowcat.co.uk/catagits/HTTP-Body.git (on the web, http://git.shadowcat.co.uk/gitweb/gitweb.cgi?p=catagits/HTTP-Body.git;a=summary). If you want to create a branch on github that contains a patch, please link to it and I can merge your change back to the main repo.
Download (untitled) / with headers
text/plain 442b
On Sat Jun 06 16:15:54 2015, ETHER wrote: Show quoted text
> > It's at git://git.shadowcat.co.uk/catagits/HTTP-Body.git (on the web, > http://git.shadowcat.co.uk/gitweb/gitweb.cgi?p=catagits/HTTP- > Body.git;a=summary). > > If you want to create a branch on github that contains a patch, please > link to it and I can merge your change back to the main repo.
Something like this? https://github.com/billmoseley/HTTP-Body/tree/check_return_value_on_write


This service is sponsored and maintained by Best Practical Solutions and runs on Perl.org infrastructure.

Please report any issues with rt.cpan.org to rt-cpan-admin@bestpractical.com.