]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: af8ea17) | patch
Tolerate '\0' in URI when mapping URI to path.
authorRuslan Ermilov <ru@nginx.com>
Mon, 16 Dec 2019 12:19:01 +0000 (15:19 +0300)
committerRuslan Ermilov <ru@nginx.com>
Mon, 16 Dec 2019 12:19:01 +0000 (15:19 +0300)
commita5895eb502747f396d3901a948834cd87d5fb0c3
tree033ae5c9ff7fcfdd521e878b11e8c267ec127558tree | snapshot
parentaf8ea176a743e97d767b3e1439d549b52dd0367acommit | diff
Tolerate '\0' in URI when mapping URI to path.

If a rewritten URI has the null character, only a part of URI was
copied to a memory buffer allocated for path.  In some setups this
could be exploited to expose uninitialized memory via the Location
header.
src/http/ngx_http_core_module.c diff | blob | history
nginx upstream