angler-fishThe Vulnerability History Project

Fix LimitRequestBody directive by moving the relevant code from

      ap_*_client_block to ap_http_filter (aka HTTP_IN).  This is the
only appropriate place for limit checking to occur (otherwise,
chunked input is not correctly limited).

Also changed the type of limit_req_body to apr_off_t to match the
other types inside of HTTP_IN.  Also made the strtol call for
limit_req_body a bit more robust.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@92700 13f79535-47bb-0310-9956-ffa450edef68
    
commit 8c16aeeeb84ef7c2fc447bc7abf2f879bb4a0f4d
-4
+3 -3
+11 -33
+2 -6
expand_less