Commit d57bee11 authored by Joe Orton's avatar Joe Orton
Browse files

* modules/http/byterange_filter.c (ap_byterange_filter): Don't reveal 

  the pid in the boundary delimiter (part of CVE-2003-1418).


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1165268 13f79535-47bb-0310-9956-ffa450edef68
parent ca5275ba

modules/http/byterange_filter.c

+1 −1
Changes for modules/http/byterange_filter.c: 1 added line, 1 removed line.
Original line number Diff line number Diff line
@@ -273,7 +273,7 @@ AP_CORE_DECLARE_NONSTD(apr_status_t) ap_byterange_filter(ap_filter_t *f, 
        /* Is ap_make_content_type required here? */

        const char *orig_ct = ap_make_content_type(r, r->content_type);

        boundary = apr_psprintf(r->pool, "%" APR_UINT64_T_HEX_FMT "%lx",

                                (apr_uint64_t)r->request_time, (long) getpid());

                                (apr_uint64_t)r->request_time, c->id);



        ap_set_content_type(r, apr_pstrcat(r->pool, "multipart",

                                           use_range_x(r) ? "/x-" : "/",