Omkhar Arasaratnam

Apache Traffic Server: uri_signing and url_sig plugins can exhaust the stack or crash

Apache Traffic Server: HostDB SRV handling leaks memory

Apache Traffic Server: Remap configuration lifetime and TOCTOU errors cause use-after-free

Apache Traffic Server: Cache deserialization and lifetime errors can corrupt state or crash the server

Apache Traffic Server: Certifier plugin trusts client SNI when generating certificates

Apache Traffic Server: Memory-safety errors in TLS and SNI handling can crash the server

Apache Traffic Server: Out-of-bounds reads while parsing DNS responses

Apache Traffic Server: Listener and ACL handling allow access-control bypass

Apache Traffic Server: Improper server-session reuse can expose data across client connections

Apache Traffic Server: URL and port parsing errors allow access-control bypass