CVE-2015-2080: Jetty vulnerable to exposure of sensitive information to unauthenticated remote users

The vulnerability stems from Jetty's HTTP header parsing logic in HttpParser.java where invalid characters trigger exceptions containing buffer debug information. The key functions are:

1. parseHeaders() where header validation occurs and exceptions are thrown
2. IllegalCharacter constructor that formats error messages with buffer contents
3. BufferUtil methods that convert raw buffer memory (including stale data) to strings These functions would appear in stack traces when processing malicious requests with illegal characters, as they directly handle the vulnerable buffer exposure logic described in advisories and blog posts. The patch would have modified these functions to prevent buffer content leakage in error messages.