# HG changeset patch # User Maxim Dounin # Date 1409161084 -14400 # Node ID 6c99c5f00fc9f1c502ce4e7b1f9e3d26003f6c21 # Parent a5886df87cbb446aae69a9ee7e48a1e0c3c924f7 Variables: fixed non-indexed access of prefix vars (ticket #600). Previously, a configuration like location / { ssi on; ssi_types *; set $http_foo "bar"; return 200 '\n'; } resulted in NULL pointer dereference in ngx_http_get_variable() as the variable was explicitly added to the variables hash, but its get_handler wasn't properly set in the hash. Fix is to make sure that get_handler is properly set by ngx_http_variables_init_vars(). diff --git a/src/http/ngx_http_variables.c b/src/http/ngx_http_variables.c --- a/src/http/ngx_http_variables.c +++ b/src/http/ngx_http_variables.c @@ -2511,8 +2511,7 @@ ngx_http_variables_init_vars(ngx_conf_t av = key[n].value; - if (av->get_handler - && v[i].name.len == key[n].key.len + if (v[i].name.len == key[n].key.len && ngx_strncmp(v[i].name.data, key[n].key.data, v[i].name.len) == 0) { @@ -2524,6 +2523,10 @@ ngx_http_variables_init_vars(ngx_conf_t av->index = i; + if (av->get_handler == NULL) { + break; + } + goto next; } }