diff options
| author | Vladimir Homutov <vl@nginx.com> | 2016-07-06 14:33:40 +0300 |
|---|---|---|
| committer | Vladimir Homutov <vl@nginx.com> | 2016-07-06 14:33:40 +0300 |
| commit | 161fcf4bddca789b15dcf22b1e1d80cdabc24114 (patch) | |
| tree | e401444fe5692dd1d84f423f994ee2bf7bc70b32 /src/os/unix/ngx_process_cycle.c | |
| parent | 74305af6727afc0c737a8e993d5cd9183c5c71d2 (diff) | |
| download | nginx-161fcf4bddca789b15dcf22b1e1d80cdabc24114.tar.gz nginx-161fcf4bddca789b15dcf22b1e1d80cdabc24114.zip | |
Fixed regex captures handling without PCRE.
If PCRE is disabled, captures were treated as normal variables in
ngx_http_script_compile(), while code calculating flushes array length in
ngx_http_compile_complex_value() did not account captures as variables.
This could lead to write outside of the array boundary when setting
last element to -1.
Found with AddressSanitizer.
Diffstat (limited to 'src/os/unix/ngx_process_cycle.c')
0 files changed, 0 insertions, 0 deletions