Incident Report On Memory Leak Triggered: Revision history

Jump to navigation Jump to search

Diff selection: Mark the radio buttons of the revisions to compare and hit enter or the button at the bottom.
Legend: (cur) = difference with latest revision, (prev) = difference with preceding revision, m = minor edit.

11 October 2025

  • curprev 01:0901:09, 11 October 2025NidaTepper3 talk contribs 5,658 bytes +5,658 Created page with "<br>Final Friday, Tavis Ormandy from Google’s Project Zero contacted Cloudflare to report a safety downside with our edge servers. He was seeing corrupted web pages being returned by some HTTP requests run by means of Cloudflare. It turned out that in some unusual circumstances, which I’ll detail below, our edge servers were running previous the tip of a buffer and returning memory that contained private info resembling HTTP cookies, authentication tokens, HTTP Put u..."