Mercurial > hg > nginx

diff src/core/ngx_string.c @ 5965:78271500b8de

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
A bounds check of %N format on Windows. Thanks to Joe Bialek, Adam Zabrocki and Microsoft Vulnerability Research.
author Igor Sysoev <igor@sysoev.ru>
date Tue, 27 Jan 2015 15:38:15 +0300
parents 33c08d7e2915
children 15a15f6ae3a2
line wrap: on
line diff
--- a/src/core/ngx_string.c
+++ b/src/core/ngx_string.c
@@ -429,8 +429,12 @@ ngx_vslprintf(u_char *buf, u_char *last,
             case 'N':
 #if (NGX_WIN32)
                 *buf++ = CR;
+                if (buf < last) {
+                    *buf++ = LF;
+                }
+#else
+                *buf++ = LF;
 #endif
-                *buf++ = LF;
                 fmt++;
 
                 continue;