# HG changeset patch
# User Igor Sysoev <igor@sysoev.ru>
# Date 1201187938 0
# Node ID 286ff5ad41207bd07ff93e3fbadbdbfe9a050737
# Parent  d5557e6a42245bd487534c76248be030081525ad
limit string length

diff --git a/src/core/ngx_string.c b/src/core/ngx_string.c
--- a/src/core/ngx_string.c
+++ b/src/core/ngx_string.c
@@ -227,7 +227,9 @@ ngx_vsnprintf(u_char *buf, size_t max, c
                     }
 
                 } else {
-                    buf = ngx_cpymem(buf, p, slen);
+                    len = (buf + slen < last) ? slen : (size_t) (last - buf);
+
+                    buf = ngx_cpymem(buf, p, len);
                 }
 
                 fmt++;