code: check for the OIDCPreservePost Content-Type header explicitly

zandbelt · zandbelt · commit 6a0b5f66c871 · 2025-05-07T07:57:32.000+02:00
see: GHSA-x7cf-8wgv-5j86 Signed-off-by: Hans Zandbelt <hans.zandbelt@openidc.com>
diff --git a/src/mod_auth_openidc.c b/src/mod_auth_openidc.c
@@ -326,7 +326,7 @@ const char *oidc_original_request_method(request_rec *r, oidc_cfg_t *cfg, apr_by
 			return OIDC_METHOD_GET;
 
 		const char *content_type = oidc_http_hdr_in_content_type_get(r);
-		if ((r->method_number == M_POST) &&
+		if ((r->method_number == M_POST) && (content_type != NULL) &&
 		    (_oidc_strcmp(content_type, OIDC_HTTP_CONTENT_TYPE_FORM_ENCODED) == 0))
 			method = OIDC_METHOD_FORM_POST;
 	}

Original file line number	Diff line number	Diff line change
`@@ -326,7 +326,7 @@ const char oidc_original_request_method(request_rec r, oidc_cfg_t *cfg, apr_by`
`326`	`326`	`return OIDC_METHOD_GET;`
`327`	`327`
`328`	`328`	`const char *content_type = oidc_http_hdr_in_content_type_get(r);`
`329`		`- if ((r->method_number == M_POST) &&`
	`329`	`+ if ((r->method_number == M_POST) && (content_type != NULL) &&`
`330`	`330`	`(_oidc_strcmp(content_type, OIDC_HTTP_CONTENT_TYPE_FORM_ENCODED) == 0))`
`331`	`331`	`method = OIDC_METHOD_FORM_POST;`
`332`	`332`	`}`