# HG changeset patch
# User Maxim Dounin <mdounin@mdounin.ru>
# Date 1424792234 -10800
# Node ID 12ab5cd445c0d15b329754b2bcd7191c830009e6
# Parent  4296627f385a8a20d2dad4f2d61cb046b9541619
Core: fixed potential buffer overrun when initializing hash.

Initial size as calculated from the number of elements may be bigger
than max_size.  If this happens, make sure to set size to max_size.

Reported by Chris West.

diff -r 4296627f385a -r 12ab5cd445c0 src/core/ngx_hash.c
--- a/src/core/ngx_hash.c	Wed Feb 04 16:22:43 2015 +0300
+++ b/src/core/ngx_hash.c	Tue Feb 24 18:37:14 2015 +0300
@@ -312,7 +312,7 @@
         continue;
     }
 
-    size--;
+    size = hinit->max_size;
 
     ngx_log_error(NGX_LOG_WARN, hinit->pool->log, 0,
                   "could not build optimal %s, you should increase "