You are viewing a plain text version of this content. The canonical link for it is here.

Posted to cvs@httpd.apache.org by wr...@apache.org on 2016/07/29 21:47:19 UTC

svn commit: r1754577 - /httpd/httpd/trunk/server/protocol.c

Author: wrowe
Date: Fri Jul 29 21:47:19 2016
New Revision: 1754577

URL: http://svn.apache.org/viewvc?rev=1754577&view=rev
Log:
Correct logic, detect no 'token' chars, or missing ':'

Modified:
    httpd/httpd/trunk/server/protocol.c

Modified: httpd/httpd/trunk/server/protocol.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/server/protocol.c?rev=1754577&r1=1754576&r2=1754577&view=diff
==============================================================================
--- httpd/httpd/trunk/server/protocol.c (original)
+++ httpd/httpd/trunk/server/protocol.c Fri Jul 29 21:47:19 2016
@@ -946,7 +946,7 @@ AP_DECLARE(void) ap_get_mime_headers_cor
                 {
                     /* Ensure valid token chars before ':' per RFC 7230 3.2.4 */
                     value = (char *)ap_scan_http_token(last_field);
-                    if ((value > last_field) || *value != ':') {
+                    if ((value == last_field) || *value != ':') {
                         r->status = HTTP_BAD_REQUEST;
                         apr_table_setn(r->notes, "error-notes",
                             apr_psprintf(r->pool,