Fixed bug #22550 (overflow protection for upload_max_filesize ini setting).

diff --git a/main/rfc1867.c b/main/rfc1867.c
index 202dc8ee8d75b61c7a38ab45052e7fb1e043900f..457a0184e24aca12a1adbafe03d0fc471d8714a2 100644 (file)
--- a/main/rfc1867.c
+++ b/main/rfc1867.c
@@ -861,7 +861,7 @@ SAPI_API SAPI_POST_HANDLER_FUNC(rfc1867_post_handler)
 
                        while (!cancel_upload && (blen = multipart_buffer_read(mbuff, buff, sizeof(buff) TSRMLS_CC)))
                        {
-                               if (total_bytes > PG(upload_max_filesize)) {
+                               if (PG(upload_max_filesize) > 0 && total_bytes > PG(upload_max_filesize)) {
                                        sapi_module.sapi_error(E_WARNING, "upload_max_filesize of %ld bytes exceeded - file [%s=%s] not saved", PG(upload_max_filesize), param, filename);
                                        cancel_upload = UPLOAD_ERROR_A;
                                } else if (max_file_size && (total_bytes > max_file_size)) {