diff options
| author | Valentin Bartenev <vbart@nginx.com> | 2016-10-18 20:46:06 +0300 |
|---|---|---|
| committer | Valentin Bartenev <vbart@nginx.com> | 2016-10-18 20:46:06 +0300 |
| commit | 841737915c97ae07f626c8199c24679151bebfcd (patch) | |
| tree | 9d874386904774bc44128631fb426b4e03363b62 /src/stream/ngx_stream_proxy_module.c | |
| parent | 66c23edf6308867572d5c4b8341e7a3fe7e97864 (diff) | |
| download | nginx-841737915c97ae07f626c8199c24679151bebfcd.tar.gz nginx-841737915c97ae07f626c8199c24679151bebfcd.zip | |
SSL: overcame possible buffer over-read in ngx_ssl_error().
It appeared that ERR_error_string_n() cannot handle zero buffer size well enough
and causes over-read.
The problem has also been fixed in OpenSSL:
https://git.openssl.org/?p=openssl.git;h=e5c1361580d8de79682958b04a5f0d262e680f8b
Diffstat (limited to 'src/stream/ngx_stream_proxy_module.c')
0 files changed, 0 insertions, 0 deletions