From: William A. Rowe Jr <wrowe@apache.org>
Date: Tue, 18 Oct 2016 16:30:43 +0000 (+0000)
Subject: Appears we cannot disallow this whitespace, since the chunk BNF coexisted
X-Git-Tag: 2.5.0-alpha~1083
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=5b2748e303435559ac7d90c5fdaef545647c9e54;p=apache

Appears we cannot disallow this whitespace, since the chunk BNF coexisted
with the implied *LWS rule, before RFC7230 eliminated the later. Whether
this is actually OWS or BWS is an editorial decision beyond our pay grade.




git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1765475 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/modules/http/http_filters.c b/modules/http/http_filters.c
index 26f2509d88..b0ed5b009b 100644
--- a/modules/http/http_filters.c
+++ b/modules/http/http_filters.c
@@ -179,8 +179,10 @@ static apr_status_t parse_chunk_size(http_ctx_t *ctx, const char *buffer,
                 return APR_EINVAL;
             }
         }
-        else if (!strict && (c == ' ' || c == '\t')) {
-            /* Be lenient up to 10 BWS (term from rfc7230 - 3.2.3).
+        else if (c == ' ' || c == '\t') {
+            /* Be lenient up to 10 implied *LWS, a legacy of RFC 2616,
+             * and noted as errata to RFC7230;
+             * https://www.rfc-editor.org/errata_search.php?rfc=7230&eid=4667
              */
             ctx->state = BODY_CHUNK_CR;
             if (++ctx->chunk_bws > 10) {