]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 030e235) | patch
Fixed incorrect ngx_cpystrn() usage in ngx_http_*_process_header().
authorMaxim Dounin <mdounin@mdounin.ru>
Thu, 15 Mar 2012 11:27:12 +0000 (11:27 +0000)
committerMaxim Dounin <mdounin@mdounin.ru>
Thu, 15 Mar 2012 11:27:12 +0000 (11:27 +0000)
commiteb526b7d7d9ee413b624a78373562183ececa738
tree6575e32c797edb0a2d7a5e45ac1c539fe919222btree | snapshot
parent030e235ec70868469cb6aaf01f25fc29d579e028commit | diff
Fixed incorrect ngx_cpystrn() usage in ngx_http_*_process_header().

This resulted in a disclosure of previously freed memory if upstream
server returned specially crafted response, potentially exposing
sensitive information.

Reported by Matthew Daley.
src/http/modules/ngx_http_fastcgi_module.c diff | blob | history
src/http/modules/ngx_http_proxy_module.c diff | blob | history
src/http/modules/ngx_http_scgi_module.c diff | blob | history
src/http/modules/ngx_http_uwsgi_module.c diff | blob | history
nginx upstream