nginx/src
Sergey Kandaurov 77c01f10a1 Detect runaway chunks in ngx_http_parse_chunked().
As defined in HTTP/1.1, body chunks have the following ABNF:

   chunk = chunk-size [ chunk-ext ] CRLF chunk-data CRLF

where chunk-data is a sequence of chunk-size octets.

With this change, chunk-data that doesn't end up with CRLF at chunk-size
offset will be treated as invalid, such as in the example provided below:

4
SEE-THIS-AND-
4
THAT
0
2019-09-03 17:26:56 +03:00
..
core Version bump. 2019-08-16 18:16:14 +03:00
event SSL: lowered log level for WSAECONNABORTED errors on Windows. 2019-08-16 18:16:21 +03:00
http Detect runaway chunks in ngx_http_parse_chunked(). 2019-09-03 17:26:56 +03:00
mail Mail: fixed duplicate resolving. 2019-08-01 13:50:07 +03:00
misc Style: aligned ngx_null_command. 2017-07-12 11:34:04 +03:00
os Fixed portability issues with union sigval. 2019-01-28 14:33:31 +00:00
stream Upstream hash: fall back to round-robin if hash key is empty. 2019-05-23 16:49:22 +03:00