Welcome! Log In Create A New Profile

Advanced

Re: [PATCH] Fix a memory invalid read issue in ngx_http_gzip_ok

agentzh
December 22, 2011 08:38AM
On Thu, Dec 22, 2011 at 9:21 PM, Maxim Dounin <mdounin@mdounin.ru> wrote:
>
> As I already said more than once, I don't think we should.  If
> it's needed - it means something else needs fixing.  We do support
> arbitrary modification of headers passed to upstream servers, and
> this should be enough.
>
> But, actually, nobody stops you from adding headers correctly,
> i.e. null-terminated.
>

Creating null-terminated buffers ourselves often means extra memory
allocations and data copying because ngx_str_t does not require a C
string at all ;)

Is it really so hard to just add a dead simple check there? ;) It does
not break the current behavior of the Nginx core at all. If there's
any other issues as you've mentioned, I'm very willing to help
preparing patches :)

Best,
-agentzh

_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-devel
Subject Author Views Posted

[PATCH] Fix a memory invalid read issue in ngx_http_gzip_ok Attachments

agentzh 1301 December 21, 2011 10:20PM

Re: [PATCH] Fix a memory invalid read issue in ngx_http_gzip_ok

Maxim Dounin 470 December 22, 2011 04:02AM

Re: [PATCH] Fix a memory invalid read issue in ngx_http_gzip_ok

agentzh 450 December 22, 2011 07:20AM

Re: [PATCH] Fix a memory invalid read issue in ngx_http_gzip_ok

Maxim Dounin 415 December 22, 2011 08:22AM

Re: [PATCH] Fix a memory invalid read issue in ngx_http_gzip_ok

agentzh 474 December 22, 2011 08:38AM

Re: [PATCH] Fix a memory invalid read issue in ngx_http_gzip_ok

Maxim Dounin 470 December 22, 2011 10:18AM

Re: [PATCH] Fix a memory invalid read issue in ngx_http_gzip_ok

agentzh 614 December 23, 2011 06:12AM



Sorry, you do not have permission to post/reply in this forum.

Online Users

Guests: 287
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready