NULL termination attacks
Published November 29th, 2004
For future reference, always remember that APR Bucket Brigades are not NULL terminated.
mod_highlight has had a bug for a couple months now where it would append random binary data to a highlighted file. I narrowed it down to something inside the ::ParseChunk
function, but it took a week of blanking out at this 10 line function to see this mistake. D’oh.
Written by Paul Querna, CTO @ ScaleFT. @pquerna