summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--changes-entries/pr66034.txt2
-rw-r--r--modules/filters/mod_substitute.c2
2 files changed, 3 insertions, 1 deletions
diff --git a/changes-entries/pr66034.txt b/changes-entries/pr66034.txt
new file mode 100644
index 0000000000..125cdc3f8e
--- /dev/null
+++ b/changes-entries/pr66034.txt
@@ -0,0 +1,2 @@
+ *) mod_substitute: Fix an integer overflow that can happen in very special
+ setups. PR 66034 [Ruediger Pluem]
diff --git a/modules/filters/mod_substitute.c b/modules/filters/mod_substitute.c
index 58e696debb..19819b8f23 100644
--- a/modules/filters/mod_substitute.c
+++ b/modules/filters/mod_substitute.c
@@ -309,7 +309,7 @@ static apr_status_t do_pattmatch(ap_filter_t *f, apr_bucket *inb,
}
}
else if (script->regexp) {
- int left = bytes;
+ apr_size_t left = bytes;
const char *pos = buff;
char *repl;
apr_size_t space_left = cfg->max_line_length;