From 7250e4d03cbd98ebc271f519dbaea9ac30de4ff6 Mon Sep 17 00:00:00 2001
From: brectanus <brectanus@9017d574-64ec-4062-9424-5e00b32a252b>
Date: Mon, 4 Feb 2008 18:22:51 +0000
Subject: [PATCH] Fix crash when there is no parameter to ENV target var.  See
 #459.

---
 apache2/re_variables.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/apache2/re_variables.c b/apache2/re_variables.c
index a4e62370..8e3dad17 100644
--- a/apache2/re_variables.c
+++ b/apache2/re_variables.c
@@ -418,6 +418,9 @@ static int var_rule_generate(modsec_rec *msr, msre_var *var, msre_rule *rule,
 /* ENV */
 
 static char *var_env_validate(msre_ruleset *ruleset, msre_var *var) {
+    if (var->param == NULL) {
+        return apr_psprintf(ruleset->mp, "Parameter required for ENV.");
+    }
     if ((strlen(var->param) > 2)&&(var->param[0] == '/')
         &&(var->param[strlen(var->param) - 1] == '/'))
     {