From fca26c2e53d46549320a3b23ce0398c5921348dd Mon Sep 17 00:00:00 2001
From: Maxim Dounin <mdounin@mdounin.ru>
Date: Tue, 7 Mar 2017 18:49:31 +0300
Subject: Converted hc->busy/hc->free to use chain links.

Most notably, this fixes possible buffer overflows if number of large
client header buffers in a virtual server is different from the one in
the default server.

Reported by Daniil Bondarev.
---
 src/http/ngx_http_request.h | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

(limited to 'src/http/ngx_http_request.h')

diff --git a/src/http/ngx_http_request.h b/src/http/ngx_http_request.h
index 4cda7549d..780a99f78 100644
--- a/src/http/ngx_http_request.h
+++ b/src/http/ngx_http_request.h
@@ -309,11 +309,10 @@ typedef struct {
 #endif
 #endif
 
-    ngx_buf_t                       **busy;
+    ngx_chain_t                      *busy;
     ngx_int_t                         nbusy;
 
-    ngx_buf_t                       **free;
-    ngx_int_t                         nfree;
+    ngx_chain_t                      *free;
 
     unsigned                          ssl:1;
     unsigned                          proxy_protocol:1;
-- 
cgit