]> granicus.if.org Git - apache/commit
Merge r1556428 from trunk:
authorJim Jagielski <jim@apache.org>
Thu, 9 Jan 2014 14:29:47 +0000 (14:29 +0000)
committerJim Jagielski <jim@apache.org>
Thu, 9 Jan 2014 14:29:47 +0000 (14:29 +0000)
commit771d2e83a61e17231ca3d822b15979565ef2b0ab
tree52b5da557be511ef216b274972de322399d0d170
parentd5c6fa00319a04d73c46ba7381d3f3b5846e9810
Merge r1556428 from trunk:

SECURITY: CVE-2013-6438 (cve.mitre.org)
mod_dav: Keep track of length of cdata properly when removing leading spaces.

* modules/dav/main/util.c
  (dav_xml_get_cdata): reduce len variable when increasing cdata pointer.

Submitted by: Amin Tora <Amin.Tora neustar.biz>

Reviewed/backported by: jim

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1556816 13f79535-47bb-0310-9956-ffa450edef68
STATUS
modules/dav/main/util.c