diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2013-05-06 14:03:24 +0400 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2013-05-06 14:03:24 +0400 |
| commit | 818807d71e3df7ea84ce016a616886f8ae79505b (patch) | |
| tree | ca9f67e1a849db91fb56f778629e578a0be57ea7 /src/http/ngx_http_parse.c | |
| parent | 9014efdadfd9ba80a5f3829364551fcdf44d1213 (diff) | |
| download | nginx-818807d71e3df7ea84ce016a616886f8ae79505b.tar.gz nginx-818807d71e3df7ea84ce016a616886f8ae79505b.zip | |
Fixed chunk size parsing.
Diffstat (limited to 'src/http/ngx_http_parse.c')
| -rw-r--r-- | src/http/ngx_http_parse.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/http/ngx_http_parse.c b/src/http/ngx_http_parse.c index 34b3b85d0..3c168aaf2 100644 --- a/src/http/ngx_http_parse.c +++ b/src/http/ngx_http_parse.c @@ -2209,6 +2209,10 @@ data: } + if (ctx->size < 0 || ctx->length < 0) { + goto invalid; + } + return rc; done: |