- Security patch mod_rewrite

Security: CVE-2006-3747
This commit is contained in:
Dirk Meyer 2006-07-27 17:06:13 +00:00
parent 10fe46491f
commit a67dc52df5
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=168896
2 changed files with 12 additions and 1 deletions

View File

@ -7,7 +7,7 @@
PORTNAME= apache+mod_ssl
PORTVERSION= ${VERSION_APACHE}+${VERSION_MODSSL}
PORTREVISION?= 0
PORTREVISION?= 1
CATEGORIES?= www security
MASTER_SITES= ${MASTER_SITE_APACHE_HTTPD} \
${MASTER_SITES_MODSSL:S/$/:mod_ssl/} \

View File

@ -0,0 +1,11 @@
--- src/modules/standard/mod_rewrite.c (revision 421288)
+++ src/modules/standard/mod_rewrite.c (working copy)
@@ -2736,7 +2736,7 @@
int c = 0;
token[0] = cp = ap_pstrdup(p, cp);
- while (*cp && c < 5) {
+ while (*cp && c < 4) {
if (*cp == '?') {
token[++c] = cp + 1;
*cp = '\0';