diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2025-11-24 15:57:09 +0400 |
|---|---|---|
| committer | Sergey Kandaurov <s.kandaurov@f5.com> | 2025-11-26 22:46:22 +0400 |
| commit | bcb41c91939009b7d01074c9a8f3cef1da13ec50 (patch) | |
| tree | c2f7bde4caeccd9ca67dc337272e9530af430bd5 /src/event | |
| parent | 6446f99107fff83469145b16983ebec99261a2db (diff) | |
| download | nginx-bcb41c91939009b7d01074c9a8f3cef1da13ec50.tar.gz nginx-bcb41c91939009b7d01074c9a8f3cef1da13ec50.tar.bz2 | |
Proxy: fixed segfault in URI change.
If request URI was shorter than location prefix, as after replacement
with try_files, location length was used to copy the remaining URI part
leading to buffer overread.
The fix is to replace full request URI in this case. In the following
configuration, request "/123" is changed to "/" when sent to backend.
location /1234 {
try_files /123 =404;
proxy_pass http://127.0.0.1:8080/;
}
Closes #983 on GitHub.
Diffstat (limited to 'src/event')
0 files changed, 0 insertions, 0 deletions