diff options
| author | Roman Arutyunyan <arut@nginx.com> | 2020-07-03 16:41:31 +0300 |
|---|---|---|
| committer | Roman Arutyunyan <arut@nginx.com> | 2020-07-03 16:41:31 +0300 |
| commit | 3b2eabde0bedc9a1a7d1b53bdbc28bdc14773dd1 (patch) | |
| tree | 4d1a345f7e788d5afb81399a933e8ba1e1a6d770 /src/os/unix/ngx_udp_sendmsg_chain.c | |
| parent | 0ebcffcf1409a03d2437ad18d65387448382620d (diff) | |
| download | nginx-3b2eabde0bedc9a1a7d1b53bdbc28bdc14773dd1.tar.gz nginx-3b2eabde0bedc9a1a7d1b53bdbc28bdc14773dd1.zip | |
HTTP/3: fixed overflow in prefixed integer parser.
Previously, the expression (ch & 0x7f) was promoted to a signed integer.
Depending on the platform, the size of this integer could be less than 8 bytes,
leading to overflow when handling the higher bits of the result. Also, sign
bit of this integer could be replicated when adding to the 64-bit st->value.
Diffstat (limited to 'src/os/unix/ngx_udp_sendmsg_chain.c')
0 files changed, 0 insertions, 0 deletions