Bug 65788

Summary: dav_get_timeout int overflow
Product: Apache httpd-2 Reporter: Eric Covener <covener>
Component: mod_davAssignee: Apache HTTPD Bugs Mailing List <bugs>
Status: NEW ---    
Severity: normal    
Priority: P2    
Version: 2.5-HEAD   
Target Milestone: ---   
Hardware: PC   
OS: Mac OS X 10.1   

Description Eric Covener 2022-01-06 19:01:00 UTC
The dav_get_timeoutfunction in "dav/main/util.c" (image1.png) returns
a time_t value (aka long int). If a big enough "timeout" value is
sent, the returned value can be overflowed.

This issue was discovered and reported by GHSL team member
@antonio-morales (Antonio Morales).