
<html><head><meta http-equiv="content-type" content="text/html; charset=GB2312"><style>body { line-height: 1.5; }body { font-size: 10.5pt; font-family: 微软雅黑; color: rgb(0, 0, 0); line-height: 1.5; }</style></head><body>

<div><span></span>Hi，</div><div><br></div><div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">In file /src/http/ngx_http_upstream.c, function</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">ngx_http_upstream_finalize_request</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;"> </div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;"> </div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">// if u->pipe == NULL, ngx_http_file_cache_free(r->cache, u->pipe->temp_file); will dereference a null pointer, it's that right ?</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;"> </div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">// Regards</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">// Alex</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;"> </div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">if (u->store && u->pipe && u->pipe->temp_file</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">        && u->pipe->temp_file->file.fd != NGX_INVALID_FILE)</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">    {</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">        if (ngx_delete_file(u->pipe->temp_file->file.name.data)</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">            == NGX_FILE_ERROR)</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">        {</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">            ngx_log_error(NGX_LOG_CRIT, r->connection->log, ngx_errno,</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">                          ngx_delete_file_n " \"%s\" failed",</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">                          u->pipe->temp_file->file.name.data);</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">        }</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">    }</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;"> </div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">#if (NGX_HTTP_CACHE)</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;"> </div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">    if (r->cache) {</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;"> </div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">      ......</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;"> </div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">        ngx_http_file_cache_free(r->cache, u->pipe->temp_file);          </div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;">    }</div><div style="font-family: 微软雅黑, Tahoma; line-height: normal;"> </div></div>

<div><br></div><hr style="width: 210px; height: 1px;" color="#b5c4df" size="1" align="left">

<div><span><div style="MARGIN: 10px; FONT-FAMILY: verdana; FONT-SIZE: 10pt"><div>alexc@sbrella.com</div></div></span></div>

</body></html>