diff options
| author | Xinchen Hui <laruence@php.net> | 2011-11-03 07:26:09 +0000 |
|---|---|---|
| committer | Xinchen Hui <laruence@php.net> | 2011-11-03 07:26:09 +0000 |
| commit | a391535e00eccc508d3d10d529f0b803a0425e8c (patch) | |
| tree | a4e96f88a40ca9abe4169c2ae02c01d021e56741 /sapi/apache2handler/sapi_apache2.c | |
| parent | 6c01aacc0d971fc35536268fb0f7b810900fa4c6 (diff) | |
| download | php-git-a391535e00eccc508d3d10d529f0b803a0425e8c.tar.gz | |
Fixed bug #60206 (possible integer overflow in content_length)
Diffstat (limited to 'sapi/apache2handler/sapi_apache2.c')
| -rw-r--r-- | sapi/apache2handler/sapi_apache2.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sapi/apache2handler/sapi_apache2.c b/sapi/apache2handler/sapi_apache2.c index 9d73174671..a7cd879278 100644 --- a/sapi/apache2handler/sapi_apache2.c +++ b/sapi/apache2handler/sapi_apache2.c @@ -484,7 +484,7 @@ static int php_apache_request_ctor(request_rec *r, php_struct *ctx TSRMLS_DC) r->no_local_copy = 1; content_length = (char *) apr_table_get(r->headers_in, "Content-Length"); - SG(request_info).content_length = (content_length ? atoi(content_length) : 0); + SG(request_info).content_length = (content_length ? atol(content_length) : 0); apr_table_unset(r->headers_out, "Content-Length"); apr_table_unset(r->headers_out, "Last-Modified"); |