From: Nick Kew Date: Tue, 20 Jul 2010 12:21:47 +0000 (+0000) Subject: Fix processing of long chunk extensions X-Git-Tag: 2.3.7~74 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=72fc19a6b601728d8f03c76fefe44a64e4f3a0c3;p=thirdparty%2Fapache%2Fhttpd.git Fix processing of long chunk extensions PR 49474 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@965824 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/CHANGES b/CHANGES index 51e520f9699..be77fc5be9e 100644 --- a/CHANGES +++ b/CHANGES @@ -36,6 +36,9 @@ Changes with Apache 2.3.7 fails to set r->user. Log bug and return 500 instead. PR 42995 [Nick Kew] + *) HTTP protocol filter: fix handling of longer chunk extensions + PR 49474 [] + Changes with Apache 2.3.6 *) SECURITY: CVE-2009-3555 (cve.mitre.org) diff --git a/modules/http/http_filters.c b/modules/http/http_filters.c index bd8239be8b7..06ef6b3ce55 100644 --- a/modules/http/http_filters.c +++ b/modules/http/http_filters.c @@ -154,8 +154,9 @@ static apr_status_t get_remaining_chunk_line(http_ctx_t *ctx, if (lineend[len - 1] != APR_ASCII_LF) { return APR_EAGAIN; } - /* Line is complete. So reset ctx->linesize for next round. */ + /* Line is complete. So reset ctx for next round. */ ctx->linesize = 0; + ctx->pos = ctx->chunk_ln; return APR_SUCCESS; }