updated patches for nginx 1.5.4.

2024-10-13 00:29:41 +00:00 · 2013-08-30 16:02:05 -07:00
parent 921fd6d675
commit 221130defc
13 changed files with 2120 additions and 1 deletions
--- a/patches/nginx-1.5.4-cve-2013-2070.patch
+++ b/patches/nginx-1.5.4-cve-2013-2070.patch
@ -0,0 +1,13 @@
+--- src/http/modules/ngx_http_proxy_module.c
+++ src/http/modules/ngx_http_proxy_module.c
+@@ -1865,6 +1865,10 @@ data:
+ 
+     }
+ 
+    if (ctx->size < 0 || ctx->length < 0) {
+        goto invalid;
+    }
+
+     return rc;
+ 
+ done: