Backport... use approvals from the sec list to

      allow for backport here.

Merge r666154, r666180 from trunk:

Patch for CVE-2008-2364...


move back to inner loop... fails otherwise

Reviewed by: jim


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@666229 13f79535-47bb-0310-9956-ffa450edef68