checked in the gzip_ok_invalid_read_fix patch.

2011-12-22 11:36:43 +08:00 · 2011-12-22 11:36:43 +08:00 · 0e98bb399f
parent 041652a80d
commit 0e98bb399f
1 changed files with 11 additions and 0 deletions
--- a/patches/nginx-1.0.10-gzip_ok_invalid_read_fix.patch
+++ b/patches/nginx-1.0.10-gzip_ok_invalid_read_fix.patch
@ -0,0 +1,11 @@
+--- nginx-1.0.10/src/http/ngx_http_core_module.c	2011-11-01 21:45:33.000000000 +0800
+++ nginx-1.0.10-patched/src/http/ngx_http_core_module.c	2011-12-22 11:08:02.546297974 +0800
+@@ -2070,7 +2070,7 @@
+      *   Opera:   "gzip, deflate"
+      */
+ 
+-    if (ngx_memcmp(ae->value.data, "gzip,", 5) != 0
+    if (ngx_memcmp(ae->value.data, "gzip,", ngx_min(ae->value.len, 5)) != 0
+         && ngx_http_gzip_accept_encoding(&ae->value) != NGX_OK)
+     {
+         return NGX_DECLINED;