From 2fc975e2a217ceb6479db91053174b5c2f3c2bdd Mon Sep 17 00:00:00 2001
From: Brian Pane <brianp@apache.org>
Date: Fri, 5 Apr 2002 07:44:14 +0000
Subject: [PATCH] Fix for the boundary case in which each character of an SSI
 directive is in a separate bucket...the code in send_parsed_content() doesn't
 expect a case where ctx->state==PARSE_DIRECTIVE but ctx->tag_start_buffer is
 NULL.  So in found_start_sequence(), we set ctx->tag_start_buffer to point to
 the next bucket if the end of the <!--# is at the very end of the current
 bucket.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94454 13f79535-47bb-0310-9956-ffa450edef68
---
 modules/filters/mod_include.c | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/modules/filters/mod_include.c b/modules/filters/mod_include.c
index c2d02c5a88..b663176575 100644
--- a/modules/filters/mod_include.c
+++ b/modules/filters/mod_include.c
@@ -327,11 +327,17 @@ static apr_bucket* found_start_sequence(apr_bucket *dptr,
     ctx->tag_length = 0;
     ctx->parse_pos = 0;
 
-    /* Don't set tag_start_bucket if tagStart indexes the end of the bucket. */
+    /* If tagStart indexes the end of the bucket, then tag_start_bucket
+     * should be the next bucket
+     */
     if (tagStart < len) {
         ctx->tag_start_bucket = dptr;
         ctx->tag_start_index = tagStart;
     }
+    else {
+        ctx->tag_start_bucket = APR_BUCKET_NEXT(dptr);
+        ctx->tag_start_index = 0;
+    }
 
     if (ctx->head_start_index > 0) {
         apr_bucket *tmp_bkt;
-- 
2.50.1