lighty labs

2021-02-13

19:12 Lighttpd Bug #3069: Illegal Instruction through sending Malformed Digest Authentication Data

I forgot to attach my configuration file. Here it is.... axe34

19:10 Lighttpd Bug #3069 (Invalid): Illegal Instruction through sending Malformed Digest Authentication Data

I am using 32bit lighttpd 1.4.59 on Ubuntu 20.04.
Here is the http request that triggers the illegal instruction.
... axe34

2021-02-08

05:04 Lighttpd Bug #3067: pedantic warning from -fsanitize=undefined

Ok thanks for all the help axe34

04:41 Lighttpd Bug #3067: pedantic warning from -fsanitize=undefined

But wouldn't this be an integer overflow because of the bitshift axe34

04:30 Lighttpd Bug #3067: pedantic warning from -fsanitize=undefined

I see so it does not warrant a cve axe34

01:21 Lighttpd Bug #3067: pedantic warning from -fsanitize=undefined

The response is the standard response.... axe34

01:20 Lighttpd Bug #3067: pedantic warning from -fsanitize=undefined

Yup, this patch works. axe34

2021-02-07

21:31 Lighttpd Bug #3067: pedantic warning from -fsanitize=undefined

My program just sends the request and then closes the connection.
axe34

19:46 Lighttpd Bug #3067: pedantic warning from -fsanitize=undefined

The crash does not occur if I do not build with -fsanitize=address,undefined and -O0
The response is the standard on... axe34

19:04 Lighttpd Bug #3067: pedantic warning from -fsanitize=undefined

For the request, I will provide the tcpdump later.
To explain it more, there is only one http request needed.
This... axe34