Backport fix for memory consumption DoS, CVE CAN-2004-0942:
* server/protocol.c (ap_rgetline_core): Don't trim trailing whitespace from the buffer here. (ap_get_mime_headers_core): Trim trailing whitespace here, after reading a complete field including continuation lines. Also simplify code to remove whitespace between field-name and colon. Reviewed by: stoddard, jorton, nd git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/APACHE_2_0_BRANCH@105730 13f79535-47bb-0310-9956-ffa450edef68
parent
7b3f0572
Please register or sign in to comment