The official NGINX Open Source repository.
Go to file
Piotr Sikora d3d64cacb3 Geo: fixed uninitialized memory access.
While copying ngx_http_variable_value_t structures to geo binary base
in ngx_http_geo_copy_values(), and similarly in the stream module,
uninitialized parts of these structures are copied as well.  These
include the "escape" field and possible holes.  Calculating crc32 of
this data triggers uninitialized memory access.

Found with MemorySanitizer.

Signed-off-by: Piotr Sikora <piotr@aviatrix.com>
2024-03-14 18:37:20 +04:00
auto Stream: ngx_stream_pass_module. 2024-02-21 17:36:02 +04:00
conf MIME: added image/avif type. 2021-10-25 20:49:15 +03:00
contrib Contrib: vim syntax, update core and 3rd party module directives. 2023-07-24 18:04:41 +03:00
docs nginx-1.25.4-RELEASE 2024-02-14 15:55:46 +04:00
misc Updated OpenSSL and zlib used for win32 builds. 2024-02-14 15:55:42 +04:00
src Geo: fixed uninitialized memory access. 2024-03-14 18:37:20 +04:00
.hgtags release-1.25.4 tag 2024-02-14 20:03:00 +04:00