Blame SOURCES/httpd-2.4.37-CVE-2021-26690.patch
|
 |
fb3f8d |
diff --git a/modules/session/mod_session.c b/modules/session/mod_session.c
|
|
|
fb3f8d |
index 7ee477c..049255d 100644
|
|
|
fb3f8d |
--- a/modules/session/mod_session.c
|
|
|
fb3f8d |
+++ b/modules/session/mod_session.c
|
|
|
fb3f8d |
@@ -404,8 +404,8 @@ static apr_status_t session_identity_decode(request_rec * r, session_rec * z)
|
|
|
fb3f8d |
char *plast = NULL;
|
|
|
fb3f8d |
const char *psep = "=";
|
|
|
fb3f8d |
char *key = apr_strtok(pair, psep, &plast);
|
|
|
fb3f8d |
- char *val = apr_strtok(NULL, psep, &plast);
|
|
|
fb3f8d |
if (key && *key) {
|
|
|
fb3f8d |
+ char *val = apr_strtok(NULL, sep, &plast);
|
|
|
fb3f8d |
if (!val || !*val) {
|
|
|
fb3f8d |
apr_table_unset(z->entries, key);
|
|
|
fb3f8d |
}
|