[PATCH 0 of 2] [patch] some issues found by gcc undef sanitizer

Vladimir Homutov vl at inspert.ru
Fri Nov 10 09:11:53 UTC 2023


> As already noted off-list, this is certainly not the only field
> which might be not yet set when
> ngx_http_alloc_large_header_buffer() is called.  From the patch
> context as shown, at least r->method_end and r->uri_start might
> not be set as well, leading to similar overflows.  And certainly
> there are other fields as well.

Agreed, there is a clear pattern in this case.
I have updated the patch to test other cases as well.

Also, I've created a separate patch to remove r->port_start,
which is actually unused and looks like remnant of old refactoring.



More information about the nginx-devel mailing list