From: reyk <reyk@openbsd.org>
Date: Wed, 6 Aug 2014 18:40:15 +0000 (+0000)
Subject: Always zero-out the fcgi record header for STDIN data.
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=9bbd4a2b8c77165f9d7bf3298a2af19db0afe876;p=openbsd

Always zero-out the fcgi record header for STDIN data.

OK florian@
---

diff --git a/usr.sbin/httpd/server_fcgi.c b/usr.sbin/httpd/server_fcgi.c
index 08fd6e16a69..4c1c8562d23 100644
--- a/usr.sbin/httpd/server_fcgi.c
+++ b/usr.sbin/httpd/server_fcgi.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: server_fcgi.c,v 1.24 2014/08/06 18:38:11 reyk Exp $	*/
+/*	$OpenBSD: server_fcgi.c,v 1.25 2014/08/06 18:40:15 reyk Exp $	*/
 
 /*
  * Copyright (c) 2014 Florian Obser <florian@openbsd.org>
@@ -358,6 +358,7 @@ fcgi_add_stdin(struct client *clt, struct evbuffer *evbuf)
 {
 	struct fcgi_record_header	h;
 
+	memset(&h, 0, sizeof(h));
 	h.version = 1;
 	h.type = FCGI_STDIN;
 	h.id = htons(1);