From 6efaa3beb19566625b58bbe4510488a72574cd8e Mon Sep 17 00:00:00 2001 From: shirely Date: Tue, 21 Jun 2022 14:08:03 +0800 Subject: [PATCH 4/5] CVE-2022-28615 --- server/util.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/server/util.c b/server/util.c index 853cb84..40b2fd4 100644 --- a/server/util.c +++ b/server/util.c @@ -185,7 +185,7 @@ AP_DECLARE(char *) ap_ht_time(apr_pool_t *p, apr_time_t t, const char *fmt, */ AP_DECLARE(int) ap_strcmp_match(const char *str, const char *expected) { - int x, y; + apr_size_t x, y; for (x = 0, y = 0; expected[y]; ++y, ++x) { if ((!str[x]) && (expected[y] != '*')) @@ -209,7 +209,7 @@ AP_DECLARE(int) ap_strcmp_match(const char *str, const char *expected) AP_DECLARE(int) ap_strcasecmp_match(const char *str, const char *expected) { - int x, y; + apr_size_t x, y; for (x = 0, y = 0; expected[y]; ++y, ++x) { if (!str[x] && expected[y] != '*') -- 1.8.3.1