开放源代码软件Apache 成熟度评估报告 - 开源中国社区- 软件镜像下载

More documents

Recommendations

Info

File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:315[9]strcat(errbuf, strerror(errno));File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:329[17]strcat(errbuf, strerror(errno));File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:389[9]strcat(errbuf, p);File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:393[9]strcat(errbuf, p);File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:397[9]strcat(errbuf, p);File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:401[9]strcat(errbuf, p);File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:404[9]strcat(errbuf, strerror(atoi(++p)));File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:407[9]strcat(errbuf, s);File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:427[5]strcat(errbuf, symbol);File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:523[9]strcat(errbuf, strerror(errno));File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:532[13]strcat(errbuf, strerror(errno));File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:539[9]strcat(errbuf, strerror(errno));File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:566[9]strcat(errbuf, strerror(errno)); httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:599[9]File:
strcat(errbuf, strerror(errno));File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:630[9]strcat(errbuf, strerror(errno));File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:683[9]strcat(errbuf, strerror(errno));File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:692[13]strcat(errbuf, strerror(errno));File: httpd-2.2.15//srclib/apr/dso/aix/dso.c Line:699[9]strcat(errbuf, strerror(errno));File: httpd-2.2.15//support/htpasswd.c Line:229[5]strcat(record, cpw);File: httpd-2.2.15//modules/metadata/mod_headers.c Line:572[5]strcat(ret, value + pmatch[0].rm_eo);File: httpd-2.2.15//modules/aaa/mod_authnz_ldap.c Line:908[9]strcat(p, sec->host);Severity: HighIssue: vfprintfCheck to be sure that the non-constant format string passed as argument 2to this function call does not come from an untrusted source that couldhave added formatting characters that the code is not prepared to handle.File: httpd-2.2.15//srclib/apr-util/test/abts.c Line:220[9]vfprintf(stderr, fmt, args);File: httpd-2.2.15//srclib/apr/test/abts.c Line:218[9]vfprintf(stderr, fmt, args);File: httpd-2.2.15//srclib/apr/build/jlibtool.c Line:304[14]res = vfprintf( f, fmt, ap );File: httpd-2.2.15//support/suexec.c Line:173[5] vfprintf(log, fmt,ap);Severity: HighIssue: getenvEnvironment variables are highly untrustable input. They may be of anylength, and contain any data. Do not make any assumptions regardingcontent or length. If at all possible avoid using them, and if it isnecessary, sanitize them and truncate them to a reasonable length.
Page 5: ‣ 启动和停止 Apache。
Page 8 and 9: 软件成熟度评估软件
Page 11 and 12: Apache 软件成熟度评估
Page 13 and 14: File: httpd-2.2.15//srclib/apr-util
Page 15 and 16: File: httpd-2.2.15//support/ab.c Li
Page 17 and 18: hp = gethostbyname(hostname);File:
Page 19 and 20: File: httpd-2.2.15//srclib/apr/buil
Page 21 and 22: File: httpd-2.2.15//srclib/apr/dso/
Page 23 and 24: File: httpd-2.2.15//modules/arch/wi
Page 25: File: httpd-2.2.15//srclib/apr/buil
Page 29 and 30: Severity: High Issue:getpassTruncat
Page 31 and 32: Additionally, the format string cou
Page 33: 2.2.15//support/win32/wintty.c Line

开放源代码软件Apache 成熟度评估报告 - 开源中国社区- 软件镜像下载

Create successful ePaper yourself

Delete template?

Save as template?