httpd/httpd-2.4.63-CVE-2026-44186.patch
2026-07-01 07:22:56 -04:00

19 lines
709 B
Diff

diff --git a/modules/proxy/mod_proxy_ftp.c b/modules/proxy/mod_proxy_ftp.c
index 5175e45..5b97c3d 100644
--- a/modules/proxy/mod_proxy_ftp.c
+++ b/modules/proxy/mod_proxy_ftp.c
@@ -1204,10 +1204,12 @@ static int proxy_ftp_handler(request_rec *r, proxy_worker *worker,
time_t secs;
/* Look for a number, preceded by whitespace */
- while (*secs_str)
+ while (*secs_str) {
if ((secs_str==ftpmessage || apr_isspace(secs_str[-1])) &&
apr_isdigit(secs_str[0]))
break;
+ secs_str++;
+ }
if (*secs_str != '\0') {
secs = atol(secs_str);
apr_table_addn(r->headers_out, "Retry-After",