Always zero-out the fcgi record header for STDIN data.
authorreyk <reyk@openbsd.org>
Wed, 6 Aug 2014 18:40:15 +0000 (18:40 +0000)
committerreyk <reyk@openbsd.org>
Wed, 6 Aug 2014 18:40:15 +0000 (18:40 +0000)
OK florian@

usr.sbin/httpd/server_fcgi.c

index 08fd6e1..4c1c856 100644 (file)
@@ -1,4 +1,4 @@
-/*     $OpenBSD: server_fcgi.c,v 1.24 2014/08/06 18:38:11 reyk Exp $   */
+/*     $OpenBSD: server_fcgi.c,v 1.25 2014/08/06 18:40:15 reyk Exp $   */
 
 /*
  * Copyright (c) 2014 Florian Obser <florian@openbsd.org>
@@ -358,6 +358,7 @@ fcgi_add_stdin(struct client *clt, struct evbuffer *evbuf)
 {
        struct fcgi_record_header       h;
 
+       memset(&h, 0, sizeof(h));
        h.version = 1;
        h.type = FCGI_STDIN;
        h.id = htons(1);