diff options
| author | Dmitry Volyntsev <xeioex@nginx.com> | 2024-10-09 17:32:11 -0700 |
|---|---|---|
| committer | Dmitry Volyntsev <xeioexception@gmail.com> | 2024-10-10 09:43:41 -0700 |
| commit | 6c8084b666cfe5db5d9401e7dff7981b5b2eb100 (patch) | |
| tree | cc820e3ea0051779c0f675b79dab4d5dfa23cd26 /nginx/ngx_js.c | |
| parent | 7b9ae6607b1bc9dae126a1a81ce1041bc79d8734 (diff) | |
| download | njs-6c8084b666cfe5db5d9401e7dff7981b5b2eb100.tar.gz njs-6c8084b666cfe5db5d9401e7dff7981b5b2eb100.zip | |
Fixed heap-buffer-overflow in Buffer.prototype.indexOf().
Previously, when `from` argument was provided heap-buffer-overflow might
happen due to lack of boundary check. `to = njs_min(to, length)`
statement was also removed because it has no effect, `to` is
equal to `length` here.
The issue was introduced in 5d15a8d6 (0.8.5).
This closes #794 issue on Github.
Diffstat (limited to 'nginx/ngx_js.c')
0 files changed, 0 insertions, 0 deletions