File fix-CVE-2025-50200.patch of Package rabbitmq-server313.40107

From ab095675a98991a5f5b25cd7671ad4658a7642c0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lo=C3=AFc=20Hoguin?= <loic.hoguin@broadcom.com>
Date: Tue, 25 Mar 2025 12:33:00 +0100
Subject: [PATCH] Fix Cowboy crashes caused by double reply

Issue introduced in 383ddb16341.
---
 .../src/rabbit_mgmt_util.erl                  | 17 +++++++++++++
 .../src/rabbit_mgmt_wm_exchange_publish.erl   | 25 ++++++-------------
 .../src/rabbit_mgmt_wm_queue_actions.erl      | 24 ++++++------------
 .../src/rabbit_mgmt_wm_queue_get.erl          | 24 ++++++------------
 4 files changed, 41 insertions(+), 49 deletions(-)

Index: rabbitmq-server-3.13.1/deps/rabbitmq_management/src/rabbit_mgmt_util.erl
===================================================================
--- rabbitmq-server-3.13.1.orig/deps/rabbitmq_management/src/rabbit_mgmt_util.erl
+++ rabbitmq-server-3.13.1/deps/rabbitmq_management/src/rabbit_mgmt_util.erl
@@ -50,6 +50,8 @@
 
 -export([disable_stats/1, enable_queue_totals/1]).
 
+-export([set_resp_not_found/2]).
+
 -import(rabbit_misc, [pget/2]).
 
 -include("rabbit_mgmt.hrl").
@@ -1141,3 +1143,18 @@ catch_no_such_user_or_vhost(Fun, Replace
 %% error is thrown when the request is out of range
 sublist(List, S, L) when is_integer(L), L >= 0 ->
     lists:sublist(lists:nthtail(S-1, List), L).
+
+-spec set_resp_not_found(binary(), cowboy_req:req()) -> cowboy_req:req().
+set_resp_not_found(NotFoundBin, ReqData) ->
+    ErrorMessage = case rabbit_mgmt_util:vhost(ReqData) of
+        not_found ->
+            <<"vhost_not_found">>;
+        _ ->
+            NotFoundBin
+    end,
+    ReqData1 = cowboy_req:set_resp_header(
+        <<"content-type">>, <<"application/json">>, ReqData),
+    cowboy_req:set_resp_body(rabbit_json:encode(#{
+        <<"error">> => <<"not_found">>,
+        <<"reason">> => ErrorMessage
+    }), ReqData1).