diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2014-03-03 17:39:53 +0400 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2014-03-03 17:39:53 +0400 |
| commit | a2a26a7ce19ba8308cef5381456070fe599d0eb7 (patch) | |
| tree | 2e75f34652cadb82fd99bd0f589c37ae26ad8fba | |
| parent | 2c0defac9b301293babf2520c0575d4a70aeee71 (diff) | |
| download | nginx-a2a26a7ce19ba8308cef5381456070fe599d0eb7.tar.gz nginx-a2a26a7ce19ba8308cef5381456070fe599d0eb7.tar.bz2 | |
Request body: avoid potential overflow.
| -rw-r--r-- | src/http/ngx_http_request_body.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/src/http/ngx_http_request_body.c b/src/http/ngx_http_request_body.c index 94cdbeed6..bbf16fd25 100644 --- a/src/http/ngx_http_request_body.c +++ b/src/http/ngx_http_request_body.c @@ -953,13 +953,13 @@ ngx_http_request_body_chunked_filter(ngx_http_request_t *r, ngx_chain_t *in) if (clcf->client_max_body_size && clcf->client_max_body_size - < r->headers_in.content_length_n + rb->chunked->size) + - r->headers_in.content_length_n < rb->chunked->size) { ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, "client intended to send too large chunked " - "body: %O bytes", - r->headers_in.content_length_n - + rb->chunked->size); + "body: %O+%O bytes", + r->headers_in.content_length_n, + rb->chunked->size); r->lingering_close = 1; |