]> git.ipfire.org Git - thirdparty/apache/httpd.git/commitdiff
Merge r1772418 from trunk:
authorEric Covener <covener@apache.org>
Sat, 3 Dec 2016 00:10:53 +0000 (00:10 +0000)
committerEric Covener <covener@apache.org>
Sat, 3 Dec 2016 00:10:53 +0000 (00:10 +0000)
loop in checking response headers

w/ HTTPProtocolOptions Unsafe

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x-merge-http-strict@1772419 13f79535-47bb-0310-9956-ffa450edef68

modules/http/http_filters.c

index 63788d7d09b8b3a0b9a89b23dafbee005b7e55a4..10bbb995abec87b565814888561d74f07de6cb61 100644 (file)
@@ -722,6 +722,7 @@ static int check_header(void *arg, const char *name, const char *val)
         /* Simply terminate scanning on a CTL char, allowing whitespace */
         test = val;
         do {
+            while (*test == ' ' || *test == '\t') test++;
             test = ap_scan_vchar_obstext(test);
         } while (*test == ' ' || *test == '\t');
     }