Project

General

Profile

Bug #3134 » 0001-mod_extforward-fix-out-of-bounds-OOB-write-of-4-byte.patch

povcfe-bug, 2022-01-05 11:14

View differences:

src/mod_extforward.c
715 715
        while (s[i] == ' ' || s[i] == '\t') ++i;
716 716
        if (s[i] == ';') { ++i; continue; }
717 717
        if (s[i] == ',') {
718
            if (j >= (int)(sizeof(offsets)/sizeof(int))) break;
718
            if (j >= (int)((sizeof(offsets)/sizeof(int)) - 1)) break;
719 719
            offsets[++j] = -1; /*("offset" separating params from next proxy)*/
720 720
            ++i;
721 721
            continue;
(4-4/4)