Skip to content

improve bounds checking for line length validation#624

Open
metsw24-max wants to merge 1 commit intoapache:trunkfrom
metsw24-max:mod_substitute-bounds-check-validation
Open

improve bounds checking for line length validation#624
metsw24-max wants to merge 1 commit intoapache:trunkfrom
metsw24-max:mod_substitute-bounds-check-validation

Conversation

@metsw24-max
Copy link
Copy Markdown

Improves bounds checking logic in mod_substitute within Apache HTTP Server

Replaces combined arithmetic validation with step-wise boundary checks

Ensures vb.strlen, len, and replen remain within max_line_length limits

Updates conditions to avoid reliance on aggregated expressions for validation

Applies consistent bounds checking pattern across related code paths

Adjusts checks involving space_left to use safe comparisons

Refines validation of regm[0].rm_so against remaining buffer space

Prevents operations from exceeding configured buffer limits

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant