* Actually we are adding 3 bytes to the string (two for the length in front

  and a \0 at the end) and not 2. So adjust the length check.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@409446 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/modules/proxy/ajp_msg.c b/modules/proxy/ajp_msg.c
index 51a9600b5946edf35c88127d5bc8ce86bf27ae6a..0408776e2034032760889ad50de6b7d678c00f2b 100644 (file)
--- a/modules/proxy/ajp_msg.c
+++ b/modules/proxy/ajp_msg.c
@@ -278,7 +278,7 @@ apr_status_t ajp_msg_append_string_ex(ajp_msg_t *msg, const char *value,
     }
 
     len = strlen(value);
-    if ((msg->len + len + 2) > AJP_MSG_BUFFER_SZ) {
+    if ((msg->len + len + 3) > AJP_MSG_BUFFER_SZ) {
         return ajp_log_overflow(msg, "ajp_msg_append_cvt_string");
     }