From 9a78709b84694567b23287f153d27c0fad8d61a8 Mon Sep 17 00:00:00 2001 From: Dmitry Volyntsev Date: Mon, 8 Jan 2024 16:40:42 -0800 Subject: [PATCH] QueryString: fixed underflow in parse(). Previously, njs_query_string_append() might be provided with invalid val_size value when value in a key-value pair was absent. Found by UndefinedBehaviorSanitizer. --- external/njs_query_string_module.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/external/njs_query_string_module.c b/external/njs_query_string_module.c index b30ffe84..c927d8e4 100644 --- a/external/njs_query_string_module.c +++ b/external/njs_query_string_module.c @@ -506,7 +506,7 @@ njs_query_string_parser(njs_vm_t *vm, u_char *query, u_char *end, size = val - key; - if (val != end) { + if (val != part) { val += eq->length; } -- 2.47.3