The official NGINX Open Source repository.
Go to file
Roman Arutyunyan 418124e219 Secure link: fixed stack buffer overflow.
When secure link checksum has length of 23 or 24 bytes, decoded base64 value
could occupy 17 or 18 bytes which is more than 16 bytes previously allocated
for it on stack.  The buffer overflow does not have any security implications
since only one local variable was corrupted and this variable was not used in
this case.

The fix is to increase buffer size up to 18 bytes.  Useless buffer size
initialization is removed as well.
2017-08-22 21:22:59 +03:00
auto Mirror module. 2017-07-20 08:50:49 +03:00
conf Added the REQUEST_SCHEME parameter. 2015-06-05 22:23:26 +03:00
contrib Contrib: proper syntax parsing in vim syntax highlighting. 2017-05-22 16:34:47 +03:00
docs nginx-1.13.4-RELEASE 2017-08-08 18:00:11 +03:00
misc Updated PCRE used for win32 builds. 2017-08-08 15:21:10 +03:00
src Secure link: fixed stack buffer overflow. 2017-08-22 21:22:59 +03:00
.hgtags release-1.13.4 tag 2017-08-08 18:00:11 +03:00