From 1f3280bae2b3a3e70471d382bdfa13a06a53eae0 Mon Sep 17 00:00:00 2001
From: Igor Sysoev <igor@sysoev.ru>
Date: Tue, 30 Aug 2011 14:25:35 +0000
Subject: [PATCH] Unsatisfiable range with start value greater than content
 length was not properly skipped. The bug has been introduced in r4057.

---
 src/http/modules/ngx_http_range_filter_module.c | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/src/http/modules/ngx_http_range_filter_module.c b/src/http/modules/ngx_http_range_filter_module.c
index 57a502536..55a37d416 100644
--- a/src/http/modules/ngx_http_range_filter_module.c
+++ b/src/http/modules/ngx_http_range_filter_module.c
@@ -264,10 +264,6 @@ ngx_http_range_parse(ngx_http_request_t *r, ngx_http_range_filter_ctx_t *ctx)
                 return NGX_HTTP_RANGE_NOT_SATISFIABLE;
             }
 
-            if (start >= content_length) {
-                goto skip;
-            }
-
             while (*p == ' ') { p++; }
 
             if (*p == ',' || *p == '\0') {
@@ -299,7 +295,7 @@ ngx_http_range_parse(ngx_http_request_t *r, ngx_http_range_filter_ctx_t *ctx)
             end = content_length - 1;
         }
 
-        if (start > end) {
+        if (start >= content_length || start > end) {
             goto skip;
         }