diff options
| author | Valentin Bartenev <vbart@nginx.com> | 2013-11-18 03:06:45 +0400 |
|---|---|---|
| committer | Valentin Bartenev <vbart@nginx.com> | 2013-11-18 03:06:45 +0400 |
| commit | b53306815ecb226c6ae0dd9729a7a0af0043b4d4 (patch) | |
| tree | 42fde5a86f09bd8384271f3c44fa41522209dba5 /src/http/ngx_http_parse.c | |
| parent | 58e26b88b774bbffbcd54bfc2de57a1b902ed4dd (diff) | |
| download | nginx-b53306815ecb226c6ae0dd9729a7a0af0043b4d4.tar.gz nginx-b53306815ecb226c6ae0dd9729a7a0af0043b4d4.tar.bz2 | |
Proxy: fixed possible uninitialized memory access.
The ngx_http_proxy_rewrite_cookie() function expects the value of the
"Set-Cookie" header to be null-terminated, and for headers obtained
from proxied server it is usually true.
Now the ngx_http_proxy_rewrite() function preserves the null character
while rewriting headers.
This fixes accessing memory outside of rewritten value if both the
"proxy_cookie_path" and "proxy_cookie_domain" directives are used in
the same location.
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions
