apache-mod_ssl-secfix.patch

   1 ===================================================================
   2 RCS file: /home/cvspublic/httpd-2.0/modules/ssl/ssl_engine_io.c,v
   3 retrieving revision 1.125
   4 retrieving revision 1.126
   5 diff -u -r1.125 -r1.126
   6 --- httpd-2.0/modules/ssl/ssl_engine_io.c       2004/08/11 13:19:24     1.125
   7 +++ httpd-2.0/modules/ssl/ssl_engine_io.c       2004/08/17 16:31:23     1.126
   8 @@ -564,8 +564,12 @@
   9          *len = bytes;
  10          if (inctx->mode == AP_MODE_SPECULATIVE) {
  11              /* We want to rollback this read. */
  12 -            inctx->cbuf.value -= bytes;
  13 -            inctx->cbuf.length += bytes;
  14 +            if (inctx->cbuf.length > 0) {
  15 +                inctx->cbuf.value -= bytes;
  16 +                inctx->cbuf.length += bytes;
  17 +            } else {
  18 +                char_buffer_write(&inctx->cbuf, buf, (int)bytes);
  19 +            }
  20              return APR_SUCCESS;
  21          }
  22          /* This could probably be *len == wanted, but be safe from stray
  23