]> git.ipfire.org Git - thirdparty/apache/httpd.git/commitdiff
Fix the way we are looking for "TLS/1.0" tokens.
authorChristophe Jaillet <jailletc36@apache.org>
Tue, 21 Apr 2020 09:02:20 +0000 (09:02 +0000)
committerChristophe Jaillet <jailletc36@apache.org>
Tue, 21 Apr 2020 09:02:20 +0000 (09:02 +0000)
ap_find_token() is more robust than expecting the token to be the first one in the 'Upgrade' header field.

(see modules/ssl/ssl_engine_kernel.c#284)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1876779 13f79535-47bb-0310-9956-ffa450edef68

modules/arch/netware/mod_nw_ssl.c

index 298554a6e5f11877e7bac35f8ae54aa8bcc6516d..ae0ef023088836c2ee60ab9ac6442daefdb879a7 100644 (file)
@@ -1178,7 +1178,7 @@ static apr_status_t ssl_io_filter_Upgrade(ap_filter_t *f,
 
     upgrade = apr_table_get(r->headers_in, "Upgrade");
     if (upgrade == NULL
-        || strcmp(ap_getword(r->pool, &upgrade, ','), "TLS/1.0")) {
+        || ap_find_token(r->pool, upgrade, "TLS/1.0")) {
             /* "Upgrade: TLS/1.0, ..." header not found, don't do Upgrade */
         return ap_pass_brigade(f->next, bb);
     }