diff options
| author | Stefan Esser | 2014-02-16 12:04:31 +0100 |
|---|---|---|
| committer | Stefan Esser | 2014-02-16 12:04:31 +0100 |
| commit | fb48d9f8eae679d5a79fd488bdac6a90e61a923a (patch) | |
| tree | 9707637a306221c38d8d82b737cf4354a4b8d850 /ifilter.c | |
| parent | 04f02a230d40c2d86b9d477a7810de24b15a7590 (diff) | |
Fix suhosin.get/post/cookie.max_totalname_length filter
Diffstat (limited to 'ifilter.c')
| -rw-r--r-- | ifilter.c | 6 |
1 files changed, 3 insertions, 3 deletions
| @@ -463,7 +463,7 @@ unsigned int suhosin_input_filter(int arg, char *var, char **val, unsigned int v | |||
| 463 | return 0; | 463 | return 0; |
| 464 | } | 464 | } |
| 465 | } | 465 | } |
| 466 | if (SUHOSIN_G(max_get_totalname_length) && SUHOSIN_G(max_get_totalname_length) < var_len) { | 466 | if (SUHOSIN_G(max_get_totalname_length) && SUHOSIN_G(max_get_totalname_length) < total_len) { |
| 467 | suhosin_log(S_VARS, "configured GET variable total name length limit exceeded - dropped variable '%s'", var); | 467 | suhosin_log(S_VARS, "configured GET variable total name length limit exceeded - dropped variable '%s'", var); |
| 468 | if (!SUHOSIN_G(simulation)) { | 468 | if (!SUHOSIN_G(simulation)) { |
| 469 | return 0; | 469 | return 0; |
| @@ -477,7 +477,7 @@ unsigned int suhosin_input_filter(int arg, char *var, char **val, unsigned int v | |||
| 477 | return 0; | 477 | return 0; |
| 478 | } | 478 | } |
| 479 | } | 479 | } |
| 480 | if (SUHOSIN_G(max_cookie_totalname_length) && SUHOSIN_G(max_cookie_totalname_length) < var_len) { | 480 | if (SUHOSIN_G(max_cookie_totalname_length) && SUHOSIN_G(max_cookie_totalname_length) < total_len) { |
| 481 | suhosin_log(S_VARS, "configured COOKIE variable total name length limit exceeded - dropped variable '%s'", var); | 481 | suhosin_log(S_VARS, "configured COOKIE variable total name length limit exceeded - dropped variable '%s'", var); |
| 482 | if (!SUHOSIN_G(simulation)) { | 482 | if (!SUHOSIN_G(simulation)) { |
| 483 | return 0; | 483 | return 0; |
| @@ -491,7 +491,7 @@ unsigned int suhosin_input_filter(int arg, char *var, char **val, unsigned int v | |||
| 491 | return 0; | 491 | return 0; |
| 492 | } | 492 | } |
| 493 | } | 493 | } |
| 494 | if (SUHOSIN_G(max_post_totalname_length) && SUHOSIN_G(max_post_totalname_length) < var_len) { | 494 | if (SUHOSIN_G(max_post_totalname_length) && SUHOSIN_G(max_post_totalname_length) < total_len) { |
| 495 | suhosin_log(S_VARS, "configured POST variable total name length limit exceeded - dropped variable '%s'", var); | 495 | suhosin_log(S_VARS, "configured POST variable total name length limit exceeded - dropped variable '%s'", var); |
| 496 | if (!SUHOSIN_G(simulation)) { | 496 | if (!SUHOSIN_G(simulation)) { |
| 497 | return 0; | 497 | return 0; |