From 222a2adf40eb25ff613c251f15032f1e39d7f609 Mon Sep 17 00:00:00 2001
From: Igor Sysoev <igor@sysoev.ru>
Date: Tue, 18 Nov 2003 16:49:00 +0000
Subject: nginx-0.0.1-2003-11-18-19:49:00 import

---
 src/http/ngx_http_cache.c | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'src/http/ngx_http_cache.c')

diff --git a/src/http/ngx_http_cache.c b/src/http/ngx_http_cache.c
index b11558c90..b3245a098 100644
--- a/src/http/ngx_http_cache.c
+++ b/src/http/ngx_http_cache.c
@@ -107,6 +107,13 @@ int ngx_http_cache_open_file(ngx_http_request_t *r, ngx_http_cache_ctx_t *ctx,
     ctx->date = h->date;
     ctx->length = h->length;
 
+    if (h->key_len > (size_t) (ctx->buf->last - ctx->buf->pos)) {
+        ngx_log_error(NGX_LOG_ALERT, r->connection->log, 0,
+                      "cache file \"%s\" is probably invalid",
+                      ctx->file.name.data);
+        return NGX_DECLINED;
+    }
+
     if (h->key_len != ctx->key.len
         || ngx_strncmp(h->key, ctx->key.data, h->key_len) != 0)
     {
-- 
cgit