File apache2-CVE-2022-26377.patch of Package apache2

Overview Repositories Revisions Requests Users Attributes Meta

File apache2-CVE-2022-26377.patch of Package apache2 (Revision 06aa9be6d97ad5ecc631c513120daca1)

Currently displaying revision 06aa9be6d97ad5ecc631c513120daca1 , Show latest

From f7f15f3d8bfe3032926c8c39eb8434529f680bd4 Mon Sep 17 00:00:00 2001
From: Yann Ylavic <ylavic@apache.org>
Date: Wed, 1 Jun 2022 13:48:21 +0000
Subject: [PATCH] mod_proxy_ajp: T-E has precedence over C-L.

Merge r1901521 from trunk.
Submitted by: rpluem

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1901522 13f79535-47bb-0310-9956-ffa450edef68
---
 modules/proxy/mod_proxy_ajp.c | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

Index: httpd-2.4.33/modules/proxy/mod_proxy_ajp.c
===================================================================
--- httpd-2.4.33.orig/modules/proxy/mod_proxy_ajp.c
+++ httpd-2.4.33/modules/proxy/mod_proxy_ajp.c
@@ -249,9 +249,18 @@ static int ap_proxy_ajp_request(apr_pool
     /* read the first bloc of data */
     input_brigade = apr_brigade_create(p, r->connection->bucket_alloc);
     tenc = apr_table_get(r->headers_in, "Transfer-Encoding");
-    if (tenc && (strcasecmp(tenc, "chunked") == 0)) {
-        /* The AJP protocol does not want body data yet */
-        ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00870) "request is chunked");
+    if (tenc) {
+        if (ap_cstr_casecmp(tenc, "chunked") == 0) {
+            /* The AJP protocol does not want body data yet */
+            ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r, APLOGNO(00870)
+                          "request is chunked");
+        }
+        else {
+            ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(10396)
+                          "%s Transfer-Encoding is not supported",
+                          tenc);
+            return HTTP_INTERNAL_SERVER_ERROR;
+        }
     } else {
         /* Get client provided Content-Length header */
         content_length = get_content_length(r);

Places

File apache2-CVE-2022-26377.patch of Package apache2 (Revision 06aa9be6d97ad5ecc631c513120daca1)

Places