]> git.kaiwu.me - njs.git/commit
Fetch: fixed heap-buffer-overflow in Headers.get(). branches/default
authorDmitry Volyntsev <xeioex@nginx.com>
Fri, 24 May 2024 05:50:34 +0000 (22:50 -0700)
committerDmitry Volyntsev <xeioex@nginx.com>
Fri, 24 May 2024 05:50:34 +0000 (22:50 -0700)
commit8226e6a7dfcff69e35219a464060dabf3b7c9ecc
treec634231c6e20a9d6f6150d29831032d406fcdd72
parent1250d031afcfd8cf1fe14637b6906f2c20835b69
Fetch: fixed heap-buffer-overflow in Headers.get().

Previously, when more than one header with the same name added to a
Headers object and Headers.get() was used to get the the duplicate
header heap-buffer-overflow occured. The overflow occurred due to an
incorrect calculation of the combined header value's length.

The issue was introduced in c43261bad627 (0.7.10).
nginx/ngx_js_fetch.c