diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2020-05-08 19:19:16 +0300 |
|---|---|---|
| committer | Sergey Kandaurov <pluknet@nginx.com> | 2020-05-08 19:19:16 +0300 |
| commit | 41ecd45a5bb78b2214c4515768a51aff0c57eead (patch) | |
| tree | 2ee4883591af3b9a48d28b68a79a4d3d9effce03 /src/http/ngx_http_variables.c | |
| parent | ee9c61b89bcb891575c809e388affd2bb04e9e60 (diff) | |
| download | nginx-41ecd45a5bb78b2214c4515768a51aff0c57eead.tar.gz nginx-41ecd45a5bb78b2214c4515768a51aff0c57eead.zip | |
Variables: fixed buffer over-read when evaluating "$arg_".
Diffstat (limited to 'src/http/ngx_http_variables.c')
| -rw-r--r-- | src/http/ngx_http_variables.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/http/ngx_http_variables.c b/src/http/ngx_http_variables.c index e067cf0c2..c2113c843 100644 --- a/src/http/ngx_http_variables.c +++ b/src/http/ngx_http_variables.c @@ -1075,7 +1075,7 @@ ngx_http_variable_argument(ngx_http_request_t *r, ngx_http_variable_value_t *v, len = name->len - (sizeof("arg_") - 1); arg = name->data + sizeof("arg_") - 1; - if (ngx_http_arg(r, arg, len, &value) != NGX_OK) { + if (len == 0 || ngx_http_arg(r, arg, len, &value) != NGX_OK) { v->not_found = 1; return NGX_OK; } |