diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2013-05-15 12:23:44 +0400 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2013-05-15 12:23:44 +0400 |
| commit | 330ebdc8fe6951a75fdbc955845b81d050b7c835 (patch) | |
| tree | 8a60a528029c8b42ea0529cf536376eb0dc557ef /src | |
| parent | 885861b6836e43ad7755bb6533105db9d0769e32 (diff) | |
| download | nginx-330ebdc8fe6951a75fdbc955845b81d050b7c835.tar.gz nginx-330ebdc8fe6951a75fdbc955845b81d050b7c835.zip | |
Proxy: clear script engine used to calculate lengths.
Previous code is believed to be safe, but might access uninitialized
memory (e.g., e->quote).
Diffstat (limited to 'src')
| -rw-r--r-- | src/http/modules/ngx_http_proxy_module.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/http/modules/ngx_http_proxy_module.c b/src/http/modules/ngx_http_proxy_module.c index 88e41e0db..d5cf07d0b 100644 --- a/src/http/modules/ngx_http_proxy_module.c +++ b/src/http/modules/ngx_http_proxy_module.c @@ -993,6 +993,8 @@ ngx_http_proxy_create_request(ngx_http_request_t *r) len += uri_len; + ngx_memzero(&le, sizeof(ngx_http_script_engine_t)); + ngx_http_script_flush_no_cacheable_variables(r, plcf->flushes); if (plcf->body_set_len) { |