Limit length of lines in .htaccess to 8K again, to reduce DoS potential.

Make ap_varbuf_cfg_getline() strictly enforce the max_len parameter.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1213338 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Stefan Fritsch
2011-12-12 17:50:33 +00:00
parent e0a5a7882e
commit 91ce790cd3
5 changed files with 26 additions and 6 deletions

View File

@ -96,6 +96,11 @@ Server.</p>
module="mod_env">SetEnv</directive>, take effect too late to be used for
expansions in the configuration file.</p>
<p>The maximum length of a line in normal configuration files, after
variable substitution and joining any continued lines, is approximately
16 MiB. In <a href="configuring.xml#htaccess">.htaccess files</a>, the
maximum length is 8190 characters.</p>
<p>You can check your configuration files for syntax errors
without starting the server by using <code>apachectl
configtest</code> or the <code>-t</code> command line