From: Eric Covener <covener@apache.org>
Date: Sat, 7 Aug 2021 10:43:06 +0000 (+0000)
Subject: ap_timeout_parameter_parse: axe unsigned < 0 check
X-Git-Tag: 2.5.0-alpha2-ci-test-only~873
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=30db75534d673f2d4ef9a104b3754e5ac2f0fd1d;p=thirdparty%2Fapache%2Fhttpd.git

ap_timeout_parameter_parse: axe unsigned < 0 check

add check to see if the result was smaller than what we started with.
But the operative part is avoiding the UBI


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1892063 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/server/util.c b/server/util.c
index 6f9dbd4d657..4a35eac6b0c 100644
--- a/server/util.c
+++ b/server/util.c
@@ -2724,7 +2724,7 @@ AP_DECLARE(apr_status_t) ap_timeout_parameter_parse(
     default:
         return APR_EGENERAL;
     }
-    if (check > APR_INT64_MAX || check < 0) { 
+    if (check > APR_INT64_MAX || check < tout) { 
         return APR_ERANGE;
     }
     *timeout = (apr_interval_time_t) check;