diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2019-09-03 17:26:56 +0300 |
|---|---|---|
| committer | Sergey Kandaurov <pluknet@nginx.com> | 2019-09-03 17:26:56 +0300 |
| commit | 77c01f10a1ab7796f57ef354fb1f078e09afe2c4 (patch) | |
| tree | 21a7e00b9548d030ed7bc476a62837229294b83b /src/http/ngx_http_core_module.c | |
| parent | 9cb22efa3fe947f8474338b99d389a35da177bb9 (diff) | |
| download | nginx-77c01f10a1ab7796f57ef354fb1f078e09afe2c4.tar.gz nginx-77c01f10a1ab7796f57ef354fb1f078e09afe2c4.tar.bz2 | |
Detect runaway chunks in ngx_http_parse_chunked().
As defined in HTTP/1.1, body chunks have the following ABNF:
chunk = chunk-size [ chunk-ext ] CRLF chunk-data CRLF
where chunk-data is a sequence of chunk-size octets.
With this change, chunk-data that doesn't end up with CRLF at chunk-size
offset will be treated as invalid, such as in the example provided below:
4
SEE-THIS-AND-
4
THAT
0
Diffstat (limited to 'src/http/ngx_http_core_module.c')
0 files changed, 0 insertions, 0 deletions