diff options
| author | Roman Arutyunyan <arut@nginx.com> | 2026-02-21 12:04:36 +0400 |
|---|---|---|
| committer | Roman Arutyunyan <arutyunyan.roman@gmail.com> | 2026-03-24 18:12:29 +0400 |
| commit | 7725c372c2fe11ff908b1d6138be219ad694c42f (patch) | |
| tree | c8f40e57a563b241db735ddb5ad7257523b78b42 /src/http/modules/ngx_http_auth_basic_module.c | |
| parent | d787755d50c96b8f0fc1c5c2df62e8ea3bd9031f (diff) | |
| download | nginx-7725c372c2fe11ff908b1d6138be219ad694c42f.tar.gz nginx-7725c372c2fe11ff908b1d6138be219ad694c42f.tar.bz2 | |
Mp4: avoid zero size buffers in output.
Previously, data validation checks did not cover the cases when the output
contained empty buffers. Such buffers are considered illegal and produce
"zero size buf in output" alerts. The change rejects the mp4 files which
produce such alerts.
Also, the change fixes possible buffer overread and overwrite that could
happen while processing empty stco and co64 atoms, as reported by
Pavel Kohout (Aisle Research) and Tim Becker.
Diffstat (limited to 'src/http/modules/ngx_http_auth_basic_module.c')
0 files changed, 0 insertions, 0 deletions