Reviewed by: jerenkrantz, jim
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@385580
13f79535-47bb-0310-9956-
ffa450edef68
-*- coding: utf-8 -*-
Changes with Apache 2.2.1
+ *) mod_speling: Stop crashing with certain non-file requests. [Jeff Trawick]
+
*) SECURITY: CVE-2005-3357 (cve.mitre.org)
mod_ssl: Fix a possible crash during access control checks if a
non-SSL request is processed for an SSL vhost (such as the
URL: http://people.apache.org/~wrowe/fixldap_mask.patch
+1: wrowe
- * mod_speling: Don't crash if r->filename unset.
- Trunk version of patch, which applies fine:
- http://svn.apache.org/viewcvs?rev=373519&view=rev
- +1: trawick, jerenkrantz, jim
-
* core: Fix up botched status lines (mismatch with r->status or
just badly formatted)
Trunk version of patch, which applies fine:
}
/* We've already got a file of some kind or another */
- if (r->proxyreq || (r->finfo.filetype != 0)) {
+ if (r->finfo.filetype != 0) {
+ return DECLINED;
+ }
+
+ /* Not a file request */
+ if (r->proxyreq || !r->filename) {
return DECLINED;
}