diff -up modsecurity-apache_2.7.3/apache2/modsecurity.c.CVE-2013-5705 modsecurity-apache_2.7.3/apache2/modsecurity.c

--- modsecurity-apache_2.7.3/apache2/modsecurity.c.CVE-2013-5705	2014-04-03 11:39:46.451454455 +0200

+++ modsecurity-apache_2.7.3/apache2/modsecurity.c	2014-04-03 11:40:47.176660100 +0200

@@ -297,7 +297,7 @@ apr_status_t modsecurity_tx_init(modsec_

     if (msr->request_content_length == -1) {

         /* There's no C-L, but is chunked encoding used? */

         char *transfer_encoding = (char *)apr_table_get(msr->request_headers, "Transfer-Encoding");

-        if ((transfer_encoding != NULL)&&(strstr(transfer_encoding, "chunked") != NULL)) {

+        if ((transfer_encoding != NULL)&&(m_strcasestr(transfer_encoding, "chunked") != NULL)) {

             msr->reqbody_should_exist = 1;

             msr->reqbody_chunked = 1;

         }