Welcome! Log In Create A New Profile

Advanced

A coredump risk in core/ngx_resolver.c

devfua
February 03, 2012 01:04AM
/* convert "www.example.com" to "\3www\7example\3com\0" */


len = 0;
p--;
*p-- = '\0';


for (s = ctx->name.data + ctx->name.len - 1; s >= ctx->name.data; s--) {
if (*s != '.') {
*p = *s;
len++;


} else {
if (len == 0) {
return NGX_DECLINED;
}


*p = (u_char) len;
len = 0;
}


p--;
}


*p = (u_char) len;



line 1778
if (*s != '.') {


if ctx->name.data = 0x0 ctx->name.len = 0
s = 0xffffffff


*s will cause segment fault。




Thanks_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-devel
Subject Author Views Posted

A coredump risk in core/ngx_resolver.c

devfua 1044 February 03, 2012 01:04AM

Re: A coredump risk in core/ngx_resolver.c

Maxim Dounin 522 February 03, 2012 05:56AM



Sorry, you do not have permission to post/reply in this forum.

Online Users

Guests: 162
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready