limit string length

diff --git a/src/core/ngx_string.c b/src/core/ngx_string.c
index 11f1cf28c0ffd74b069ac612a0bbb10a5b26e68c..acd9382dda6366c4492fa08a72193375d21c8335 100644 (file)
--- a/src/core/ngx_string.c
+++ b/src/core/ngx_string.c
@@ -227,7 +227,9 @@ ngx_vsnprintf(u_char *buf, size_t max, const char *fmt, va_list args)
                     }
 
                 } else {
-                    buf = ngx_cpymem(buf, p, slen);
+                    len = (buf + slen < last) ? slen : (size_t) (last - buf);
+
+                    buf = ngx_cpymem(buf, p, len);
                 }
 
                 fmt++;