An official read-only mirror of http://hg.nginx.org/nginx/ which is updated hourly. Pull requests on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes to nginx is via the nginx development mailing list, see http://nginx.org/en/docs/contributing_changes.html
Go to file
Valentin Bartenev 0c05e5b55f SPDY: fixed potential integer overflow while parsing headers.
Previously r->header_size was used to store length for a part of
value that represents an individual already parsed HTTP header,
while r->header_end pointed to the end of the whole value.

Instead of storing length of a following name or value as pointer
to a potential end address (r->header_name_end and r->header_end)
that might be overflowed, now r->lowercase_index counter is used
to store remaining length of a following unparsed field.

It also fixes incorrect $body_bytes_sent value if a request is
closed while parsing of the request header.  Since r->header_size
is intended for counting header size, thus abusing it for header
parsing purpose was certainly a bad idea.
2014-03-03 19:24:55 +04:00
auto Win32: MSVC 2013 compatibility. 2014-02-13 16:54:00 +04:00
conf MIME: added application/json MIME type. 2013-09-18 12:59:47 -07:00
contrib Contrib: added vim to README. 2013-12-06 19:58:27 +04:00
docs Docs: xslt regenerated. 2014-02-28 20:17:01 +04:00
misc Updated PCRE used for win32 builds. 2014-02-04 07:45:33 +04:00
src SPDY: fixed potential integer overflow while parsing headers. 2014-03-03 19:24:55 +04:00
.hgtags release-1.5.10 tag 2014-02-04 16:26:46 +04:00