*** httpd-2.2.19/modules/mappers/mod_negotiation.c_orig	2010-08-24 15:33:01.000000000 +0900
--- httpd-2.2.19/modules/mappers/mod_negotiation.c	2011-07-17 01:05:58.000000000 +0900
***************
*** 994,1007 ****
              }
              else if (!strncmp(buffer, "content-length:", 15)) {
                  char *errp;
                  apr_off_t number;
  
!                 if (apr_strtoff(&number, body, &errp, 10)
                      || *errp || number < 0) {
                      ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r,
                                    "Parse error in type map, Content-Length: "
                                    "'%s' in %s is invalid.",
!                                   body, r->filename);
                      break;
                  }
                  mime_info.bytes = number;
--- 994,1009 ----
              }
              else if (!strncmp(buffer, "content-length:", 15)) {
                  char *errp;
+                 char *body2;
                  apr_off_t number;
  
!                 body2 = ap_get_token(neg->pool, &body, 0);
!                 if (apr_strtoff(&number, body2, &errp, 10)
                      || *errp || number < 0) {
                      ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r,
                                    "Parse error in type map, Content-Length: "
                                    "'%s' in %s is invalid.",
!                                   body2, r->filename);
                      break;
                  }
                  mime_info.bytes = number;