HTTP Buffer Overflows

Paul Prescod paul@prescod.net
Mon, 11 Mar 2002 16:38:49 -0800


Gregory Alan Bolcer wrote:
> 
> Jeff Barr wrote:
> 
> > I'll bet against this one.
> >
> > The number of places where a raw HTTP buffer is processed in any given
> > system are going to be pretty low.
> 
> But I think that was the whole point.  With the advent
> of SOAP over HTTP Web Services, there are going to be a
> lot more programmers writing their own simple stack rather
> than pulling in yet another Web component.

Why do you think so? SOAP is sufficiently painful to parse that you
would want to use someone else's library, running on their HTTP library.
On Windows you would expect to use the SOAP implementation built into
the .NET framework (even if you're programming on C++). Elsewhere you
might use EasySOAP or Apache SOAP.

 Paul Prescod