]> git.kaiwu.me - nginx.git/commit
Geo: fixed uninitialized memory access.
authorPiotr Sikora <piotr@aviatrix.com>
Thu, 14 Mar 2024 14:37:20 +0000 (18:37 +0400)
committerPiotr Sikora <piotr@aviatrix.com>
Thu, 14 Mar 2024 14:37:20 +0000 (18:37 +0400)
commitd3d64cacb3ce96477d354fe17d3b5c6e348f933a
tree014471753874a52b6fea50984a3e98f4fe469ee2
parent5e79d98a59b6d094145200976077aa7ca34a84d0
Geo: fixed uninitialized memory access.

While copying ngx_http_variable_value_t structures to geo binary base
in ngx_http_geo_copy_values(), and similarly in the stream module,
uninitialized parts of these structures are copied as well.  These
include the "escape" field and possible holes.  Calculating crc32 of
this data triggers uninitialized memory access.

Found with MemorySanitizer.

Signed-off-by: Piotr Sikora <piotr@aviatrix.com>
src/http/modules/ngx_http_geo_module.c
src/stream/ngx_stream_geo_module.c