Permalink
Browse files

Fix Chunked string case sensitive issue - CVE-2013-5705

  • Loading branch information...
brenosilva committed Sep 4, 2013
1 parent 3901128 commit f8d441cd25172fdfe5b613442fedfc0da3cc333d
Showing with 1 addition and 1 deletion.
  1. +1 −1 apache2/modsecurity.c
View
@@ -297,7 +297,7 @@ apr_status_t modsecurity_tx_init(modsec_rec *msr) {
if (msr->request_content_length == -1) {
/* There's no C-L, but is chunked encoding used? */
char *transfer_encoding = (char *)apr_table_get(msr->request_headers, "Transfer-Encoding");
- if ((transfer_encoding != NULL)&&(strstr(transfer_encoding, "chunked") != NULL)) {
+ if ((transfer_encoding != NULL)&&(m_strcasestr(transfer_encoding, "chunked") != NULL)) {
msr->reqbody_should_exist = 1;
msr->reqbody_chunked = 1;
}

0 comments on commit f8d441c

Please sign in to comment.