diff options
| author | Roman Arutyunyan <arut@nginx.com> | 2025-09-29 20:47:27 +0400 |
|---|---|---|
| committer | Roman Arutyunyan <arutyunyan.roman@gmail.com> | 2025-10-23 18:40:05 +0400 |
| commit | c8c7beb96f61e2251abbc345357116131cf91c22 (patch) | |
| tree | 5928dd85d6785404835a778045af0f973df05814 /src/http/ngx_http_parse.c | |
| parent | 78d1ab5a2c00839a36ff6bac661d9785fce3c1a4 (diff) | |
| download | nginx-c8c7beb96f61e2251abbc345357116131cf91c22.tar.gz nginx-c8c7beb96f61e2251abbc345357116131cf91c22.tar.bz2 | |
Added $request_port and $is_request_port variables.
The $request_port variable contains the port passed by the client in the
request line (for HTTP/1.x) or ":authority" pseudo-header (for HTTP/2 and
HTTP/3). If the request line contains no host, or ":authority" is missing,
then $request_port is taken from the "Host" header, similar to the $host
variable.
The $is_request_port variable contains ":" if $request_port is non-empty,
and is empty otherwise.
Diffstat (limited to 'src/http/ngx_http_parse.c')
| -rw-r--r-- | src/http/ngx_http_parse.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/http/ngx_http_parse.c b/src/http/ngx_http_parse.c index a45c04554..68f604e10 100644 --- a/src/http/ngx_http_parse.c +++ b/src/http/ngx_http_parse.c @@ -446,6 +446,11 @@ ngx_http_parse_request_line(ngx_http_request_t *r, ngx_buf_t *b) case sw_port: if (ch >= '0' && ch <= '9') { + if (r->port >= 6553 && (r->port > 6553 || (ch - '0') > 5)) { + return NGX_HTTP_PARSE_INVALID_REQUEST; + } + + r->port = r->port * 10 + (ch - '0'); break; } |