Commit7fff893

authored and

Felipe Zimmerle

committed

Check return value of modsecurity_request_body_store

1 parent6ce7f4d commit7fff893Copy full SHA for 7fff893

File tree

-2

lines changed

-2

lines changed

Lines changed: 3 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -283,7 +283,9 @@ apr_status_t read_request_body(modsec_rec msr, char *error_msg) {`
`283`	`283`	`}`
`284`	`284`
`285`	`285`	`if (msr->txcfg->stream_inbody_inspection==1) {`
`286`		`-modsecurity_request_body_to_stream(msr,buf,buflen,error_msg);`
	`286`	`+if (modsecurity_request_body_to_stream(msr,buf,buflen,error_msg)<0) {`
	`287`	`+return-1;`
	`288`	`+ }`
`287`	`289`	`}`
`288`	`290`
`289`	`291`	`msr->reqbody_length+=buflen;`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -432,7 +432,7 @@ apr_status_t modsecurity_request_body_to_stream(modsec_rec msr, const char buf`
`432`	`432`	`char*allocated=NULL;`
`433`	`433`
`434`	`434`	`if (msr->stream_input_data==NULL) {`
`435`		`-// Is the request body lengthisknown beforehand? (requests that are not Transfer-Encoding: chunked)`
	`435`	`+// Is the request body length known beforehand? (requests that are not Transfer-Encoding: chunked)`
`436`	`436`	`if (msr->request_content_length>0) {`
`437`	`437`	`// Use min of Content-Length and SecRequestBodyLimit`
`438`	`438`	`allocate_length=min(msr->request_content_length,msr->txcfg->reqbody_limit);`

Comments

(0)