mod_wsgi/CVE-2022-2255.patch
zhuhai a3f5478d2c Fix CVE-2022-2255
change License to Apache-2.0

cve to CVE
2022-08-09 09:50:40 +08:00

12 lines
544 B
Diff

diff -Nur mod_wsgi-4.6.4.old/src/server/mod_wsgi.c mod_wsgi-4.6.4/src/server/mod_wsgi.c
--- mod_wsgi-4.6.4.old/src/server/mod_wsgi.c 2022-08-08 15:27:04.978005420 +0800
+++ mod_wsgi-4.6.4/src/server/mod_wsgi.c 2022-08-08 15:30:20.395491862 +0800
@@ -13897,6 +13897,7 @@
value = apr_table_get(r->subprocess_env, name);
if (!strcmp(name, "HTTP_X_FORWARDED_FOR") ||
+ !strcmp(name, "HTTP_X_CLIENT_IP") ||
!strcmp(name, "HTTP_X_REAL_IP")) {
match_client_header = 1;