# HG changeset patch
# User Maxim Dounin <mdounin@mdounin.ru>
# Date 1368436768 -14400
# Node ID abfe9e6e72cb14d7a73e8c2da5614fa3cbcfecc4
# Parent  6082e0ab3d89541dcaf6f409cbec2eafbfd768e4
Fixed chunk size parsing.

diff --git a/src/http/modules/ngx_http_proxy_module.c b/src/http/modules/ngx_http_proxy_module.c
--- a/src/http/modules/ngx_http_proxy_module.c
+++ b/src/http/modules/ngx_http_proxy_module.c
@@ -1865,6 +1865,10 @@ data:
 
     }
 
+    if (ctx->size < 0 || ctx->length < 0) {
+        goto invalid;
+    }
+
     return rc;
 
 done: