]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Merge r1198940 from trunk:
authorJim Jagielski <jim@apache.org>
Sun, 30 Sep 2012 15:42:25 +0000 (15:42 +0000)
committerJim Jagielski <jim@apache.org>
Sun, 30 Sep 2012 15:42:25 +0000 (15:42 +0000)
commit524127f9cfe620f66a9e4d307a5712bdab466f19
treec53a4435f9062f9afa00ad626fd8bef411b1987b
parentc35034298d1f3cb9a46c915f37eba254b79e2b90
Merge r1198940 from trunk:

Fix integer overflow in ap_pregsub. This can be triggered e.g.
with mod_setenvif via a malicious .htaccess

CVE-2011-3607
http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/

Submitted by: sf
Reviewed/backported by: jim

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@1392042 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
STATUS
server/util.c