]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Merge r1198940 from trunk resp. r1227280 from 2.2.x:
authorRainer Jung <rjung@apache.org>
Wed, 3 Oct 2012 16:18:10 +0000 (16:18 +0000)
committerRainer Jung <rjung@apache.org>
Wed, 3 Oct 2012 16:18:10 +0000 (16:18 +0000)
commitb58a2a33c5d0b22ad000b54915c519c2f6195c78
tree51d3d5e91a33650e708398956050ce088a62fdc0
parent95a74702047df2df57e7b4b8df412f2267d46b38
Merge r1198940 from trunk resp. r1227280 from 2.2.x:

Fix integer overflow in ap_pregsub. This can be triggered e.g.
with mod_setenvif via a malicious .htaccess

CVE-2011-3607
http://www.halfdog.net/Security/2011/ApacheModSetEnvIfIntegerOverflow/

Submitted by: sf
Reviewed/backported by: rjung

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@1393580 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
STATUS
server/util.c