The official NGINX Open Source repository.
Go to file
Maxim Dounin f5708e66c7 Mp4: fixed possible pointer overflow on 32-bit platforms.
On 32-bit platforms mp4->buffer_pos might overflow when a large
enough (close to 4 gigabytes) atom is being skipped, resulting in
incorrect memory addesses being read further in the code.  In most
cases this results in harmless errors being logged, though may also
result in a segmentation fault if hitting unmapped pages.

To address this, ngx_mp4_atom_next() now only increments mp4->buffer_pos
up to mp4->buffer_end.  This ensures that overflow cannot happen.
2018-11-21 20:23:16 +03:00
auto Configure: fixed compiler warnings with "-Wall -Wextra". 2018-07-24 18:46:54 +03:00
conf MIME: added font/woff2 type (ticket #1243). 2018-06-15 17:29:55 +03:00
contrib Contrib: vim syntax, update core and 3rd party module directives. 2018-03-18 11:11:14 +02:00
docs nginx-1.15.6-RELEASE 2018-11-06 16:32:08 +03:00
misc Updated OpenSSL used for win32 builds. 2018-08-28 15:05:41 +03:00
src Mp4: fixed possible pointer overflow on 32-bit platforms. 2018-11-21 20:23:16 +03:00
.hgtags release-1.15.6 tag 2018-11-06 16:32:09 +03:00