# HG changeset patch
# User Vladimir Homutov <vl@nginx.com>
# Date 1535102377 -10800
# Node ID 15ea84e65d07715a2059a076bc29e1a552e66e1a
# Parent  70c6b08973a02551612da4a4273757dc77c70ae2
Upstream: fixed request chain traversal (ticket #1618).

The problem does not manifest itself currently, because in case of
non-buffered reading, chain link created by u->create_request method
consists of a single element.

Found by PVS-Studio.

diff --git a/src/http/ngx_http_upstream.c b/src/http/ngx_http_upstream.c
--- a/src/http/ngx_http_upstream.c
+++ b/src/http/ngx_http_upstream.c
@@ -2135,7 +2135,7 @@ ngx_http_upstream_send_request_body(ngx_
         out = u->request_bufs;
 
         if (r->request_body->bufs) {
-            for (cl = out; cl->next; cl = out->next) { /* void */ }
+            for (cl = out; cl->next; cl = cl->next) { /* void */ }
             cl->next = r->request_body->bufs;
             r->request_body->bufs = NULL;
         }