diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2017-10-04 21:19:42 +0300 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2017-10-04 21:19:42 +0300 |
| commit | 41d8ea8c8d268555d3cbd8dd2ab32dcc06658209 (patch) | |
| tree | 04abf1948e0f8a3a52267f84a2f33bc97c337dd7 /src/core/ngx_inet.c | |
| parent | cba23f88ec6740b7f8d6a1383254708a91d37625 (diff) | |
| download | nginx-41d8ea8c8d268555d3cbd8dd2ab32dcc06658209.tar.gz nginx-41d8ea8c8d268555d3cbd8dd2ab32dcc06658209.tar.bz2 | |
Fixed handling of unix sockets in $binary_remote_addr.
Previously, unix sockets were treated as AF_INET ones, and this may
result in buffer overread on Linux, where unbound unix sockets have
2-byte addresses.
Note that it is not correct to use just sun_path as a binary representation
for unix sockets. This will result in an empty string for unbound unix
sockets, and thus behaviour of limit_req and limit_conn will change when
switching from $remote_addr to $binary_remote_addr. As such, normal text
representation is used.
Reported by Stephan Dollberg.
Diffstat (limited to 'src/core/ngx_inet.c')
0 files changed, 0 insertions, 0 deletions
