added patches for nginx 1.4.1.

2024-10-13 00:29:41 +00:00 · 2013-06-10 16:35:04 -07:00
parent 5328f0113f
commit c312ba38b3
15 changed files with 2280 additions and 5 deletions
--- a/patches/nginx-1.4.1-cve-2013-2070.patch
+++ b/patches/nginx-1.4.1-cve-2013-2070.patch
@ -0,0 +1,13 @@
+--- src/http/modules/ngx_http_proxy_module.c
+++ src/http/modules/ngx_http_proxy_module.c
+@@ -1865,6 +1865,10 @@ data:
+ 
+     }
+ 
+    if (ctx->size < 0 || ctx->length < 0) {
+        goto invalid;
+    }
+
+     return rc;
+ 
+ done: