httpd/backport-CVE-2006-20001.patch

36 lines
1.3 KiB
Diff

From b00b92bb9d1497414abf6ca1b679bcc8ad32a443 Mon Sep 17 00:00:00 2001
From: notroj <notroj@redhat.com>
Date: Mon, 9 Jan 2023 08:07:58 PM GMT+0800
Subject: [PATCH] modules/dav/main/util(dav_process_if_header):Fix error
Conflict:NA
Reference:https://github.com/apache/httpd/commit/b00b92bb9d1497414abf6ca1b679bcc8ad32a443
---
modules/dav/main/util.c | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/modules/dav/main/util.c b/modules/dav/main/util.c
index 08ebe27..2a2c7aa 100644
--- a/modules/dav/main/util.c
+++ b/modules/dav/main/util.c
@@ -756,8 +756,14 @@ static dav_error * dav_process_if_header(request_rec *r, dav_if_header **p_ih)
"for the same state.");
}
condition = DAV_IF_COND_NOT;
+ list += 2;
+ }
+ else {
+ return dav_new_error(r->pool, HTTP_BAD_REQUEST,
+ DAV_ERR_IF_UNK_CHAR, 0,
+ "Invaild \"If:\" header: "
+ "Unexpected character in List");
}
- list += 2;
break;
case ' ':
--
2.23.0