mirror of
https://github.com/nginx/nginx.git
synced 2026-05-13 17:46:53 +00:00
The official NGINX Open Source repository.
https://nginx.org/
content-cachehttphttp2http3httpsload-balancermail-proxy-servernginxquicreverse-proxysecuritytcp-proxy-servertlsudp-proxy-serverweb-server
f09eae2a75
Previously, ngx_utf8_decode() was called from ngx_utf8_length() with incorrect length, potentially resulting in out-of-bounds read when handling invalid UTF-8 strings. In practice out-of-bounds reads are not possible though, as autoindex, the only user of ngx_utf8_length(), provides null-terminated strings, and ngx_utf8_decode() anyway returns an errors when it sees a null in the middle of an UTF-8 sequence. Reported by Yunbin Liu. |
||
|---|---|---|
| auto | ||
| conf | ||
| contrib | ||
| docs | ||
| misc | ||
| src | ||
| .hgtags | ||