diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2013-05-06 14:03:24 +0400 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2013-05-06 14:03:24 +0400 |
| commit | 4997de8005630664ab35f27140e2077e818b21a7 (patch) | |
| tree | 02f2ce704b9b3b7d415303a8cb464759f80caf93 | |
| parent | 243ecc69cd69b06034d2a9e8024f56c862d349de (diff) | |
| download | nginx-4997de8005630664ab35f27140e2077e818b21a7.tar.gz nginx-4997de8005630664ab35f27140e2077e818b21a7.tar.bz2 | |
Fixed chunk size parsing.
| -rw-r--r-- | src/http/ngx_http_parse.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/http/ngx_http_parse.c b/src/http/ngx_http_parse.c index 34b3b85d0..3c168aaf2 100644 --- a/src/http/ngx_http_parse.c +++ b/src/http/ngx_http_parse.c @@ -2209,6 +2209,10 @@ data: } + if (ctx->size < 0 || ctx->length < 0) { + goto invalid; + } + return rc; done: |