Mercurial > hg > nginx
changeset 5769:e0aa54a4357e
Reset of r->uri.len on URI parsing errors.
This ensures that debug logging and the $uri variable (if used in
400 Bad Request processing) will not try to access uninitialized
memory.
Found by Sergey Bobrov.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Fri, 18 Jul 2014 20:02:11 +0400 |
parents | 70a0408cca7b |
children | 9de5820bb3e0 |
files | src/http/ngx_http_request.c |
diffstat | 1 files changed, 2 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/src/http/ngx_http_request.c Wed Jul 16 10:21:28 2014 +0400 +++ b/src/http/ngx_http_request.c Fri Jul 18 20:02:11 2014 +0400 @@ -1071,6 +1071,8 @@ cscf = ngx_http_get_module_srv_conf(r, ngx_http_core_module); if (ngx_http_parse_complex_uri(r, cscf->merge_slashes) != NGX_OK) { + r->uri.len = 0; + ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, "client sent invalid request"); ngx_http_finalize_request(r, NGX_HTTP_BAD_REQUEST);