# HG changeset patch
# User Maxim Dounin <mdounin@mdounin.ru>
# Date 1367834604 -14400
# Node ID f1e993f6c11d922b3c9987b0e891ff05fba5de42
# Parent  8088f11db86e6fd2e25843c391547d00a9caa50d
Fixed chunk size parsing.

diff --git a/src/http/ngx_http_parse.c b/src/http/ngx_http_parse.c
--- a/src/http/ngx_http_parse.c
+++ b/src/http/ngx_http_parse.c
@@ -2209,6 +2209,10 @@ data:
 
     }
 
+    if (ctx->size < 0 || ctx->length < 0) {
+        goto invalid;
+    }
+
     return rc;
 
 done: