diff options
| author | Roman Arutyunyan <arut@nginx.com> | 2026-02-23 18:29:16 +0400 |
|---|---|---|
| committer | Roman Arutyunyan <arutyunyan.roman@gmail.com> | 2026-02-23 22:12:32 +0400 |
| commit | edb4d2ffa746ba30bcae90e9527d5512b3de2c5b (patch) | |
| tree | 05ef8885b492ddef1c712be76e122262f887e1d8 /src | |
| parent | bb8ec295ab59451c19c0ae0c66882b4f84ff4ef7 (diff) | |
| download | nginx-edb4d2ffa746ba30bcae90e9527d5512b3de2c5b.tar.gz nginx-edb4d2ffa746ba30bcae90e9527d5512b3de2c5b.tar.bz2 | |
Resolver: fixed off-by-one read in ngx_resolver_copy().
It is believed to be harmless, see a similar change 077a890a76ff.
Reported-by: geeknik <geeknik@protonmail.ch>
Diffstat (limited to 'src')
| -rw-r--r-- | src/core/ngx_resolver.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/core/ngx_resolver.c b/src/core/ngx_resolver.c index c76c17852..f8f677878 100644 --- a/src/core/ngx_resolver.c +++ b/src/core/ngx_resolver.c @@ -2757,7 +2757,7 @@ ngx_resolver_process_srv(ngx_resolver_t *r, u_char *buf, size_t n, case NGX_RESOLVE_SRV: - if (i + 6 > n) { + if (i + 6 >= n) { goto short_response; } |