Lighttpd

In function buffer_substr_replace(), the buffer is inappropriately increased by the buffer_extend() functions.

Previously in version 1.4.59 it was:

buffer_string_set_length(b, blen-len+rlen);

As of version 1.4.60 it is (It's bad):

buffer_extend(b, blen-len+rlen);

The buffer_extend() function increases the buffer (it does not set the size as in the previous function buffer_string_set_length()) and it should be:

buffer_extend(b, rlen-len);

The error occurred when using mod_proxy with the configuration:

proxy.header = (
    "map-urlpath" => (
    "/proxy/switch/b0:b3:2b:00:e2:6b/" => "/",
    "/proxy/switch/b0:b3:2b:00:e2:6b" => "/" 
    )
  )