]> git.kaiwu.me - nginx.git/commit
Proxy: fixed segfault in URI change.
authorSergey Kandaurov <pluknet@nginx.com>
Mon, 24 Nov 2025 11:57:09 +0000 (15:57 +0400)
committerSergey Kandaurov <s.kandaurov@f5.com>
Wed, 26 Nov 2025 18:46:22 +0000 (22:46 +0400)
commitbcb41c91939009b7d01074c9a8f3cef1da13ec50
treec2f7bde4caeccd9ca67dc337272e9530af430bd5
parent6446f99107fff83469145b16983ebec99261a2db
Proxy: fixed segfault in URI change.

If request URI was shorter than location prefix, as after replacement
with try_files, location length was used to copy the remaining URI part
leading to buffer overread.

The fix is to replace full request URI in this case.  In the following
configuration, request "/123" is changed to "/" when sent to backend.

    location /1234 {
        try_files /123 =404;
        proxy_pass http://127.0.0.1:8080/;
    }

Closes #983 on GitHub.
src/http/modules/ngx_http_proxy_module.c