Commit 0ba4ebde authored by Ruediger Pluem's avatar Ruediger Pluem
Browse files

* Prevent a segfault when a CGI script sets a cookie with a null value. 

Submitted by: David Shane Holden <dpejesh apache.org>
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@678160 13f79535-47bb-0310-9956-ffa450edef68
parent 49f658e9

CHANGES

+2 −0
Changes for CHANGES: 2 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -2,6 +2,8 @@ 
Changes with Apache 2.3.0

[ When backported to 2.2.x, remove entry from this file ]



  *) mod_session: Prevent a segfault when a CGI script sets a cookie with a

     null value. [David Shane Holden <dpejesh apache.org>]



  *) mod_headers: Prevent Header edit from processing only the first header

     of possibly multiple headers with the same name and deleting the

modules/session/mod_session.c

+1 −1
Changes for modules/session/mod_session.c: 1 added line, 1 removed line.
Original line number Diff line number Diff line
@@ -364,7 +364,7 @@ static int session_identity_decode(request_rec * r, session_rec * z) 
            if (!val || !*val) {

                apr_table_unset(z->entries, key);

            }

            if (!ap_unescape_all(key) && !ap_unescape_all(val)) {

            else if (!ap_unescape_all(key) && !ap_unescape_all(val)) {

                if (!strcmp(SESSION_EXPIRY, key)) {

                    z->expiry = (apr_time_t) apr_atoi64(val);

                }