diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2013-05-13 13:19:28 +0400 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2013-05-13 13:19:28 +0400 |
| commit | 2265b3c2b9fefc7b2065ea160466f3a6c0b025d3 (patch) | |
| tree | f54ac396f94c0306b041a87fe65af981a8ae489a | |
| parent | 0826eca58e73b932cb4e0679fe949cf8d0636dac (diff) | |
| download | nginx-2265b3c2b9fefc7b2065ea160466f3a6c0b025d3.tar.gz nginx-2265b3c2b9fefc7b2065ea160466f3a6c0b025d3.tar.bz2 | |
Fixed chunk size parsing.
| -rw-r--r-- | src/http/modules/ngx_http_proxy_module.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/http/modules/ngx_http_proxy_module.c b/src/http/modules/ngx_http_proxy_module.c index 977bed73c..0566213db 100644 --- a/src/http/modules/ngx_http_proxy_module.c +++ b/src/http/modules/ngx_http_proxy_module.c @@ -1865,6 +1865,10 @@ data: } + if (ctx->size < 0 || ctx->length < 0) { + goto invalid; + } + return rc; done: |