diff options
| author | Xinchen Hui <laruence@php.net> | 2011-11-03 07:26:09 +0000 |
|---|---|---|
| committer | Xinchen Hui <laruence@php.net> | 2011-11-03 07:26:09 +0000 |
| commit | d4b90b47881a8a7738f01c33dc8fe4827d193273 (patch) | |
| tree | 215698368a5bb9cf034cbae7a127cb088550dc58 /sapi/apache2handler | |
| parent | cae2f1381f0cb110605f39e37b8721fc4794127b (diff) | |
| download | php-git-d4b90b47881a8a7738f01c33dc8fe4827d193273.tar.gz | |
Fixed bug #60206 (possible integer overflow in content_length)
Diffstat (limited to 'sapi/apache2handler')
| -rw-r--r-- | sapi/apache2handler/sapi_apache2.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sapi/apache2handler/sapi_apache2.c b/sapi/apache2handler/sapi_apache2.c index a7f250d512..bb772b24c1 100644 --- a/sapi/apache2handler/sapi_apache2.c +++ b/sapi/apache2handler/sapi_apache2.c @@ -483,7 +483,7 @@ static int php_apache_request_ctor(request_rec *r, php_struct *ctx TSRMLS_DC) r->no_local_copy = 1; content_length = (char *) apr_table_get(r->headers_in, "Content-Length"); - SG(request_info).content_length = (content_length ? atoi(content_length) : 0); + SG(request_info).content_length = (content_length ? atol(content_length) : 0); apr_table_unset(r->headers_out, "Content-Length"); apr_table_unset(r->headers_out, "Last-Modified"); |