mirror/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2025-08-06 06:46:16 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity
d1a02451c3
nginx/src/http
History
Roman Arutyunyan d1a02451c3 Mp4: unordered stsc chunks error for the final chunk. 
Currently an error is triggered if any of the chunk runs in stsc are
unordered.  This however does not include the final chunk run, which
ends with trak->chunks + 1.  The previous chunk index can be larger
leading to a 32-bit overflow.  This could allow to skip the validity
check "if (start_sample > n)".  This could later lead to a large
trak->start_chunk/trak->end_chunk, which would be caught later in
ngx_http_mp4_update_stco_atom() or ngx_http_mp4_update_co64_atom().

While there are no implications of the validity check being avoided,
the change still adds a check to ensure the final chunk run is ordered,
to produce a meaningful error and avoid a potential integer overflow.
2024-11-21 16:08:48 +04:00
..
modules Mp4: unordered stsc chunks error for the final chunk. 2024-11-21 16:08:48 +04:00
v2 HTTP/2: close connections initialized during graceful shutdown. 2024-07-18 17:43:25 +04:00
v3 HTTP/3: fixed handling of zero-length literal field line. 2024-05-28 17:20:45 +04:00
ngx_http_cache.h Cache: keep c->body_start when Vary changes (ticket #2029). 2020-09-09 19:26:27 +03:00
ngx_http_config.h Copyright updated. 2012-01-18 15:07:43 +00:00
ngx_http_copy_filter_module.c Fixed request termination with AIO and subrequests (ticket #2555). 2024-01-30 03:20:05 +03:00
ngx_http_core_module.c HTTP/3: added more compatibility checks for "listen ... quic". 2024-01-30 19:19:26 +04:00
ngx_http_core_module.h HTTP/3: removed "http3" parameter of "listen" directive. 2023-05-11 13:22:10 +04:00
ngx_http_file_cache.c Fixed request termination with AIO and subrequests (ticket #2555). 2024-01-30 03:20:05 +03:00
ngx_http_header_filter_module.c Avoid sending "Connection: keep-alive" when shutting down. 2022-01-11 02:23:49 +03:00
ngx_http_huff_decode.c Adjusted Huffman coding debug logging, missed in 7977:336084ff943b. 2023-11-14 14:50:03 +04:00
ngx_http_huff_encode.c Moved Huffman coding out of HTTP/2. 2021-12-21 07:54:16 +03:00
ngx_http_parse.c Proxy: proxy_pass_trailers directive. 2024-09-13 16:47:56 +04:00
ngx_http_postpone_filter_module.c Postpone filter: prevented uninitialized r->out. 2018-03-01 18:38:39 +03:00
ngx_http_request_body.c Proxy: proxy_pass_trailers directive. 2024-09-13 16:47:56 +04:00
ngx_http_request.c Fixed request termination with AIO and subrequests (ticket #2555). 2024-01-30 03:20:05 +03:00
ngx_http_request.h Fixed request termination with AIO and subrequests (ticket #2555). 2024-01-30 03:20:05 +03:00
ngx_http_script.c All known output headers can be linked lists now. 2022-05-30 21:25:45 +03:00
ngx_http_script.h Upstream: variables support in certificates. 2021-05-06 02:22:09 +03:00
ngx_http_special_response.c All known output headers can be linked lists now. 2022-05-30 21:25:45 +03:00
ngx_http_upstream_round_robin.c Upstream: per-upstream resolver. 2024-11-07 07:57:42 -08:00
ngx_http_upstream_round_robin.h Upstream: copy upstream zone DNS valid time during config reload. 2024-11-07 07:57:42 -08:00
ngx_http_upstream.c Upstream: per-upstream resolver. 2024-11-07 07:57:42 -08:00
ngx_http_upstream.h Upstream: construct upstream peers from DNS SRV records. 2024-11-07 07:57:42 -08:00
ngx_http_variables.c Variables: avoid possible buffer overrun with some "$sent_http_*". 2023-05-01 19:16:05 +04:00
ngx_http_variables.h Combining unknown headers during variables lookup (ticket #1316). 2022-05-30 21:25:32 +03:00
ngx_http_write_filter_module.c Merged with the default branch. 2022-02-14 10:14:07 +03:00
ngx_http.c Common tree insert function for QUIC and UDP connections. 2023-05-14 12:30:11 +04:00
ngx_http.h Proxy: proxy_pass_trailers directive. 2024-09-13 16:47:56 +04:00