Mercurial > hg > nginx

changeset 6081:12ab5cd445c0 stable-1.6

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Core: fixed potential buffer overrun when initializing hash. Initial size as calculated from the number of elements may be bigger than max_size. If this happens, make sure to set size to max_size. Reported by Chris West.
author Maxim Dounin <mdounin@mdounin.ru>
date Tue, 24 Feb 2015 18:37:14 +0300
parents 4296627f385a
children 51d4fde64bca
files src/core/ngx_hash.c
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/src/core/ngx_hash.c
+++ b/src/core/ngx_hash.c
@@ -312,7 +312,7 @@ ngx_hash_init(ngx_hash_init_t *hinit, ng
         continue;
     }
 
-    size--;
+    size = hinit->max_size;
 
     ngx_log_error(NGX_LOG_WARN, hinit->pool->log, 0,
                   "could not build optimal %s, you should increase "