aboutsummaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorMaxim Dounin <mdounin@mdounin.ru>2013-09-30 22:10:08 +0400
committerMaxim Dounin <mdounin@mdounin.ru>2013-09-30 22:10:08 +0400
commitaa36cc39a40a8d6a1e5fbc7a527b1a39db790d01 (patch)
tree2f1b9be9b7a40df4d49c43d357cdf84859bc9c5e /src
parentf2b5192c30e51b3376eb09525c0d0a75fda30c38 (diff)
downloadnginx-aa36cc39a40a8d6a1e5fbc7a527b1a39db790d01.tar.gz
nginx-aa36cc39a40a8d6a1e5fbc7a527b1a39db790d01.zip
Mail: fixed overrun of allocated memory (ticket #411).
Reported by Markus Linnala.
Diffstat (limited to 'src')
-rw-r--r--src/mail/ngx_mail_smtp_module.c1
1 files changed, 0 insertions, 1 deletions
diff --git a/src/mail/ngx_mail_smtp_module.c b/src/mail/ngx_mail_smtp_module.c
index cdd4e5eb1..02bbf1fb9 100644
--- a/src/mail/ngx_mail_smtp_module.c
+++ b/src/mail/ngx_mail_smtp_module.c
@@ -277,7 +277,6 @@ ngx_mail_smtp_merge_srv_conf(ngx_conf_t *cf, void *parent, void *child)
p = ngx_cpymem(p, conf->capability.data, conf->capability.len);
p = ngx_cpymem(p, "250 STARTTLS" CRLF, sizeof("250 STARTTLS" CRLF) - 1);
- *p++ = CR; *p = LF;
p = conf->starttls_capability.data
+ (last - conf->capability.data) + 3;