From: Eric Covener <covener@apache.org>
Date: Sat, 3 Dec 2016 00:10:31 +0000 (+0000)
Subject: loop in checking response headers
X-Git-Tag: 2.5.0-alpha~959
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1597a10583071e688ecdc80948ae0d99893a6947;p=thirdparty%2Fapache%2Fhttpd.git

loop in checking response headers

w/ HTTPProtocolOptions Unsafe


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1772418 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/modules/http/http_filters.c b/modules/http/http_filters.c
index 3971e3d10ee..85cae017b00 100644
--- a/modules/http/http_filters.c
+++ b/modules/http/http_filters.c
@@ -667,6 +667,7 @@ static int check_header(void *arg, const char *name, const char *val)
         /* Simply terminate scanning on a CTL char, allowing whitespace */
         test = val;
         do {
+            while (*test == ' ' || *test == '\t') test++;
             test = ap_scan_vchar_obstext(test);
         } while (*test == ' ' || *test == '\t');
     }