From 818807d71e3df7ea84ce016a616886f8ae79505b Mon Sep 17 00:00:00 2001
From: Maxim Dounin <mdounin@mdounin.ru>
Date: Mon, 6 May 2013 14:03:24 +0400
Subject: [PATCH] Fixed chunk size parsing.

---
 src/http/ngx_http_parse.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/http/ngx_http_parse.c b/src/http/ngx_http_parse.c
index 34b3b85d0..3c168aaf2 100644
--- a/src/http/ngx_http_parse.c
+++ b/src/http/ngx_http_parse.c
@@ -2209,6 +2209,10 @@ data:
 
     }
 
+    if (ctx->size < 0 || ctx->length < 0) {
+        goto invalid;
+    }
+
     return rc;
 
 done: