diff --git a/src/http/ngx_http_parse.c b/src/http/ngx_http_parse.c index 34b3b85d0..3c168aaf2 100644 --- a/src/http/ngx_http_parse.c +++ b/src/http/ngx_http_parse.c @@ -2209,6 +2209,10 @@ data: } + if (ctx->size < 0 || ctx->length < 0) { + goto invalid; + } + return rc; done: