comparison src/http/ngx_http_file_cache.c @ 6287:4ccb37b04454

Fixed ngx_parse_time() out of bounds access (ticket #821). The code failed to ensure that "s" is within the buffer passed for parsing when checking for "ms", and this resulted in unexpected errors when parsing non-null-terminated strings with trailing "m". The bug manifested itself when the expires directive was used with variables. Found by Roman Arutyunyan.
author Maxim Dounin <mdounin@mdounin.ru>
date Fri, 30 Oct 2015 21:43:30 +0300
parents 4821fc788c12
children 9fd738b85fad
comparison
equal deleted inserted replaced
6286:a6a2016b8e31 6287:4ccb37b04454