github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2026-01-10 02:04:36 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix for an evasion false positive, mistaking a multipart non-boundary for a boundary.

Browse Source
This commit is contained in:
ivanr
2007-11-08 18:13:50 +00:00
parent 48d9956bc0
commit 9b5a42480b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
apache2/msc_multipart.c
View File

@@ -925,7 +925,7 @@ int multipart_process_chunk(modsec_rec *msr, const char *buf,
}
if ( (p != msr->mpd->buf + 2)
&& (strncmp(p, msr->mpd->boundary, strlen(msr->mpd->boundary)))
&& (strncmp(p, msr->mpd->boundary, strlen(msr->mpd->boundary)) == 0)
) {
/* Found whitespace in front of a boundary. */
msr->mpd->flag_error = 1;