diff options
author | Valentin Bartenev <vbart@nginx.com> | 2013-11-18 03:06:45 +0400 |
---|---|---|
committer | Valentin Bartenev <vbart@nginx.com> | 2013-11-18 03:06:45 +0400 |
commit | b53306815ecb226c6ae0dd9729a7a0af0043b4d4 (patch) | |
tree | 42fde5a86f09bd8384271f3c44fa41522209dba5 /src/http/ngx_http_variables.c | |
parent | 58e26b88b774bbffbcd54bfc2de57a1b902ed4dd (diff) | |
download | nginx-b53306815ecb226c6ae0dd9729a7a0af0043b4d4.tar.gz nginx-b53306815ecb226c6ae0dd9729a7a0af0043b4d4.zip |
Proxy: fixed possible uninitialized memory access.
The ngx_http_proxy_rewrite_cookie() function expects the value of the
"Set-Cookie" header to be null-terminated, and for headers obtained
from proxied server it is usually true.
Now the ngx_http_proxy_rewrite() function preserves the null character
while rewriting headers.
This fixes accessing memory outside of rewritten value if both the
"proxy_cookie_path" and "proxy_cookie_domain" directives are used in
the same location.
Diffstat (limited to 'src/http/ngx_http_variables.c')
0 files changed, 0 insertions, 0 deletions