diff options
| author | William A. Rowe Jr <wrowe@apache.org> | 2016-07-29 23:47:19 +0200 |
|---|---|---|
| committer | William A. Rowe Jr <wrowe@apache.org> | 2016-07-29 23:47:19 +0200 |
| commit | 04a85817d0fb35238d7439af700645ac5337234d (patch) | |
| tree | eb250a6e8c628e4d4a9a4db38850ce62c7f15cc7 /server/protocol.c | |
| parent | Correct usage for ap_scan_http_token (had used _get_ syntax), noted by Rüdiger (diff) | |
| download | apache2-04a85817d0fb35238d7439af700645ac5337234d.tar.xz apache2-04a85817d0fb35238d7439af700645ac5337234d.zip | |
Correct logic, detect no 'token' chars, or missing ':'
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1754577 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'server/protocol.c')
| -rw-r--r-- | server/protocol.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/server/protocol.c b/server/protocol.c index cef75175ba..60be6fb12a 100644 --- a/server/protocol.c +++ b/server/protocol.c @@ -946,7 +946,7 @@ AP_DECLARE(void) ap_get_mime_headers_core(request_rec *r, apr_bucket_brigade *bb { /* Ensure valid token chars before ':' per RFC 7230 3.2.4 */ value = (char *)ap_scan_http_token(last_field); - if ((value > last_field) || *value != ':') { + if ((value == last_field) || *value != ':') { r->status = HTTP_BAD_REQUEST; apr_table_setn(r->notes, "error-notes", apr_psprintf(r->pool, |