Add in some error detection, since this is userland provided

info.

PR:
Obtained from:
Submitted by:
Reviewed by:

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@103198 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/src/main/http_vhost.c b/src/main/http_vhost.c
index 122a23273297feb3444a8bed390fe6ef7c344e04..e759805dcc8e63ed8213936671a0b4dbb1a26ad3 100644 (file)
--- a/src/main/http_vhost.c
+++ b/src/main/http_vhost.c
@@ -691,8 +691,13 @@ static void fix_hostname(request_rec *r)
                 goto bad;
             else {
                 /* a known "good" port value */
+                int iport;
+                iport = atoi(port_str);
+                if (iport < 1 || iport > 65535) {
+                    goto bad;
+                }
                 r->parsed_uri.port_str = ap_pstrdup(r->pool, port_str);
-                r->parsed_uri.port = atoi(r->parsed_uri.port_str);
+                r->parsed_uri.port = iport;
                 break;
             }
         }