diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2012-03-15 11:27:12 +0000 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2012-03-15 11:27:12 +0000 |
| commit | eb526b7d7d9ee413b624a78373562183ececa738 (patch) | |
| tree | 6575e32c797edb0a2d7a5e45ac1c539fe919222b /src/http/ngx_http_parse.c | |
| parent | 030e235ec70868469cb6aaf01f25fc29d579e028 (diff) | |
| download | nginx-eb526b7d7d9ee413b624a78373562183ececa738.tar.gz nginx-eb526b7d7d9ee413b624a78373562183ececa738.tar.bz2 | |
Fixed incorrect ngx_cpystrn() usage in ngx_http_*_process_header().
This resulted in a disclosure of previously freed memory if upstream
server returned specially crafted response, potentially exposing
sensitive information.
Reported by Matthew Daley.
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions