SCGI Request format bug

Phil H phil at firstecu.com
Sat Jul 1 17:39:20 UTC 2017


I've got an SCGI project I'm working on.  My setup: buildroot, arm,
1.10.3.  I'm using auth_request to authorize any restricted resources,
auth_request uses SCGI to my auth client.  99% of the time, I get normal,
expected behavior.  Randomly an http resource will have a bad SCGI request
format from Nginx to my auth client, which causes that resource to get
denied.  It appears that Nginx has a problem formatting the SCGI request,
has an invalid size at the front (per SCGI spec), which is typically 6-8
bytes larger than the bytes sent over the socket.  Looks like a string
handling bug.  Here are some SCGI requests that come in bad ( 2 examples,
each one has good on top, bad below)

https://paste.ngx.cc/386b

Thanks,
-Phil
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx-devel/attachments/20170701/67a9d7ab/attachment.html>


More information about the nginx-devel mailing list