changeset 7648:028b16e2798f

Variables: fixed buffer over-read when evaluating "$arg_".
author Sergey Kandaurov <pluknet@nginx.com>
date Fri, 08 May 2020 19:19:16 +0300
parents 716eddd74bc2
children 3c8082c3f98a
files src/http/ngx_http_variables.c
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/src/http/ngx_http_variables.c
+++ b/src/http/ngx_http_variables.c
@@ -1075,7 +1075,7 @@ ngx_http_variable_argument(ngx_http_requ
     len = name->len - (sizeof("arg_") - 1);
     arg = name->data + sizeof("arg_") - 1;
 
-    if (ngx_http_arg(r, arg, len, &value) != NGX_OK) {
+    if (len == 0 || ngx_http_arg(r, arg, len, &value) != NGX_OK) {
         v->not_found = 1;
         return NGX_OK;
     }