* Fixed bug.

    - SEGV with POST request to image.

diff --git a/src/chxj_img_conv_format.c b/src/chxj_img_conv_format.c
index 03461c2..be418c1 100644 (file)
--- a/src/chxj_img_conv_format.c
+++ b/src/chxj_img_conv_format.c
@@ -2438,7 +2438,7 @@ s_add_comment_to_png(request_rec *r, char *data, apr_size_t *len)
     pos += 4;
     memcpy(&result[pos], &data[PNG_SIG_AND_IHDR_SZ] , *len - PNG_SIG_AND_IHDR_SZ);
     *len = *len + total_tEXt_size;
-    DBG(r, "REQ[%X] writebyte:[%d]", (unsigned int)(apr_size_t)r, *len);
+    DBG(r, "REQ[%X] writebyte:[%d]", (unsigned int)(apr_size_t)r, (unsigned int)*len);
   }
   else {
     result = data;

diff --git a/src/chxj_ixhtml10.c b/src/chxj_ixhtml10.c
index 9d5e5bf..3dda3b0 100755 (executable)
--- a/src/chxj_ixhtml10.c
+++ b/src/chxj_ixhtml10.c
@@ -3775,7 +3775,7 @@ s_ixhtml10_start_img_tag(void *pdoc, Node *node)
   if (attr_src) {
     W_L(" src=\"");
     W_V(attr_src);
-    DBG(r,"mode is %d -> %s",ixhtml10->conf->image_rewrite_mode);
+    DBG(r,"mode is %d -> %s",ixhtml10->conf->image_rewrite_mode, attr_src);
     W_L("\"");
   }
   if (attr_align || attr_hspace || attr_vspace || css_float || css_margin_left || css_margin_right || css_margin_top || css_margin_bottom || css_valign ) {

diff --git a/src/chxj_serf.c b/src/chxj_serf.c
index 1b89ec5..432284e 100644 (file)
--- a/src/chxj_serf.c
+++ b/src/chxj_serf.c
@@ -480,7 +480,9 @@ default_chxj_serf_post(request_rec *r, apr_pool_t *ppool, const char *url_path,
   DBG(r, "response:[%s][%" APR_SIZE_T_FMT "]", handler_ctx.response, handler_ctx.response_len);
   serf_connection_close(connection);
   if (handler_ctx.response) {
-    ret = apr_pstrdup(ppool, handler_ctx.response);
+    ret = apr_palloc(ppool, handler_ctx.response_len + 1);
+    memset(ret, 0, handler_ctx.response_len + 1);
+    memcpy(ret, handler_ctx.response, handler_ctx.response_len);
   }
   else {
     ret = apr_pstrdup(ppool, "");