diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2021-09-22 14:10:43 +0300 |
|---|---|---|
| committer | Sergey Kandaurov <pluknet@nginx.com> | 2021-09-22 14:10:43 +0300 |
| commit | 2cd173d450cbb61291c772556609bcfbc9da1170 (patch) | |
| tree | 133bf0f071247737d4e2a56e4d5d035dbd3fdd38 /src | |
| parent | 08dcf62f5b8ee49927dc38bae705b8fa777799e4 (diff) | |
| download | nginx-2cd173d450cbb61291c772556609bcfbc9da1170.tar.gz nginx-2cd173d450cbb61291c772556609bcfbc9da1170.zip | |
HTTP/3: fixed null pointer dereference with server push.
See details for HTTP/2 fix in 8b0553239592 for a complete description.
Diffstat (limited to 'src')
| -rw-r--r-- | src/http/v3/ngx_http_v3_filter_module.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/http/v3/ngx_http_v3_filter_module.c b/src/http/v3/ngx_http_v3_filter_module.c index 43d2cd1bd..a88b32f07 100644 --- a/src/http/v3/ngx_http_v3_filter_module.c +++ b/src/http/v3/ngx_http_v3_filter_module.c @@ -858,6 +858,10 @@ ngx_http_v3_push_resource(ngx_http_request_t *r, ngx_str_t *path, return NGX_ABORT; } + if (r->headers_in.host == NULL) { + return NGX_ABORT; + } + push_id = h3c->next_push_id++; rc = ngx_http_v3_create_push_request(r, path, push_id); |