comparison auto/install @ 6344:a8ecb0a2193f stable-1.8

Fixed ngx_parse_time() out of bounds access (ticket #821). The code failed to ensure that "s" is within the buffer passed for parsing when checking for "ms", and this resulted in unexpected errors when parsing non-null-terminated strings with trailing "m". The bug manifested itself when the expires directive was used with variables. Found by Roman Arutyunyan.
author Maxim Dounin <mdounin@mdounin.ru>
date Fri, 30 Oct 2015 21:43:30 +0300
parents 95ce3172493e
children c983c8dea44c
comparison
equal deleted inserted replaced
6343:60ae75969588 6344:a8ecb0a2193f