File apache2-CVE-2021-26691.patch of Package apache2.34694

Index: httpd-2.4.23/modules/session/mod_session.c
===================================================================
--- httpd-2.4.23.orig/modules/session/mod_session.c	2021-06-08 13:43:53.780013814 +0200
+++ httpd-2.4.23/modules/session/mod_session.c	2021-06-08 13:44:32.096232332 +0200
@@ -304,7 +304,7 @@ static apr_status_t ap_session_set(reque
 
 static int identity_count(int *count, const char *key, const char *val)
 {
-    *count += strlen(key) * 3 + strlen(val) * 3 + 1;
+    *count += strlen(key) * 3 + strlen(val) * 3 + 2;
     return 1;
 }
 
openSUSE Build Service is sponsored by