From edb4d2ffa746ba30bcae90e9527d5512b3de2c5b Mon Sep 17 00:00:00 2001 From: Roman Arutyunyan Date: Mon, 23 Feb 2026 18:29:16 +0400 Subject: Resolver: fixed off-by-one read in ngx_resolver_copy(). It is believed to be harmless, see a similar change 077a890a76ff. Reported-by: geeknik --- src/core/ngx_resolver.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/core/ngx_resolver.c b/src/core/ngx_resolver.c index c76c17852..f8f677878 100644 --- a/src/core/ngx_resolver.c +++ b/src/core/ngx_resolver.c @@ -2757,7 +2757,7 @@ ngx_resolver_process_srv(ngx_resolver_t *r, u_char *buf, size_t n, case NGX_RESOLVE_SRV: - if (i + 6 > n) { + if (i + 6 >= n) { goto short_response; } -- cgit