Skip to content

[2.4.x] Merge changes to mod_deflate - #911

Open
notroj wants to merge 1 commit into
apache:2.4.xfrom
notroj:2.4.x-mod_deflate
Open

notroj wants to merge 1 commit into
apache:2.4.xfrom
notroj:2.4.x-mod_deflate

Conversation

@notroj

@notroj notroj commented Oct 31, 2026

Copy link
Copy Markdown
Collaborator

Merge r1939124 from trunk:

mod_deflate: Fix sign extension when reading the gzip extra-field length.

  • changes-entries/deflate-xlen-unsigned.txt: Add changes entry.

  • modules/filters/mod_deflate.c (consume_zlib_flags): Cast the
    FEXTRA length bytes through unsigned char before widening so a
    byte with the high bit set is not sign-extended, fixing inflation
    of gzip streams carrying an extra field.

Submitted by: arshiya tabasum
GitHub: closes #839

🤖 Generated with Claude Code

…gth.

* changes-entries/deflate-xlen-unsigned.txt: Add changes entry.

* modules/filters/mod_deflate.c (consume_zlib_flags): Cast the
  FEXTRA length bytes through unsigned char before widening so a
  byte with the high bit set is not sign-extended, fixing inflation
  of gzip streams carrying an extra field.

Submitted by: arshiya tabasum <arshi bugqore.com>
GitHub: closes apache#839

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1939124 13f79535-47bb-0310-9956-ffa450edef68
(cherry picked from commit b2dc966)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants