Skip to content

Commit f8d441c

Browse files
committed
Fix Chunked string case sensitive issue - CVE-2013-5705
1 parent 3901128 commit f8d441c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Diff for: apache2/modsecurity.c

+1-1
Original file line numberDiff line numberDiff line change
@@ -297,7 +297,7 @@ apr_status_t modsecurity_tx_init(modsec_rec *msr) {
297297
if (msr->request_content_length == -1) {
298298
/* There's no C-L, but is chunked encoding used? */
299299
char *transfer_encoding = (char *)apr_table_get(msr->request_headers, "Transfer-Encoding");
300-
if ((transfer_encoding != NULL)&&(strstr(transfer_encoding, "chunked") != NULL)) {
300+
if ((transfer_encoding != NULL)&&(m_strcasestr(transfer_encoding, "chunked") != NULL)) {
301301
msr->reqbody_should_exist = 1;
302302
msr->reqbody_chunked = 1;
303303
}

0 commit comments

Comments
 (0)