# HG changeset patch # User Valentin Bartenev # Date 1445365718 -10800 # Node ID ee16fb0db905cfb858a929374cf623cdf1a0f9d3 # Parent adaac65899c81506089a20646c291408385b58ee HTTP/2: improved error handling while parsing integers. The case when an integer is out of frame bounds should be checked first as a more accurate error. diff --git a/src/http/v2/ngx_http_v2.c b/src/http/v2/ngx_http_v2.c --- a/src/http/v2/ngx_http_v2.c +++ b/src/http/v2/ngx_http_v2.c @@ -2417,14 +2417,14 @@ ngx_http_v2_parse_int(ngx_http_v2_connec } } + if ((size_t) (end - start) >= h2c->state.length) { + return NGX_ERROR; + } + if (end == start + NGX_HTTP_V2_INT_OCTETS) { return NGX_DECLINED; } - if ((size_t) (end - start) >= h2c->state.length) { - return NGX_ERROR; - } - return NGX_AGAIN; }