details: http://hg.nginx.org/nginx/rev/66db21c0ac55
branches: stable-1.4
changeset: 5419:66db21c0ac55
user: Maxim Dounin <mdounin@mdounin.ru>
date: Mon Sep 30 22:10:08 2013 +0400
description:
Mail: fixed overrun of allocated memory (ticket #411).

Reported by Markus Linnala.

diffstat:

src/mail/ngx_mail_smtp_module.c | 1 -
1 files changed, 0 insertions(+), 1 deletions(-)

diffs (11 lines):

diff --git a/src/mail/ngx_mail_smtp_module.c b/src/mail/ngx_mail_smtp_module.c
--- a/src/mail/ngx_mail_smtp_module.c
+++ b/src/mail/ngx_mail_smtp_module.c
@@ -277,7 +277,6 @@ ngx_mail_smtp_merge_srv_conf(ngx_conf_t
p = ngx_cpymem(p, conf->capability.data, conf->capability.len);

p = ngx_cpymem(p, "250 STARTTLS" CRLF, sizeof("250 STARTTLS" CRLF) - 1);
- *p++ = CR; *p = LF;

p = conf->starttls_capability.data
+ (last - conf->capability.data) + 3;

_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-devel