How to reproduce issue CVE-2016-4450?

Oleksandr V. Typlyns'kyi wangsamp at gmail.com
Fri Jun 3 07:32:15 UTC 2016


Today Jun 3, 2016 at 06:55 ?? wrote:

> Hi,
> 
> I am working on the fixing of issue CVE-2016-4450, it seems that if the request body is neither saved in the memory nor in file, it might crash when save the request body to the temp file.
> Could you instruct me what kind of request body can trigger this issue? I want to reproduce it, and evaluate the whether upgrade our nginx server.

  Chunked WebDAV PUT: https://trac.nginx.org/nginx/ticket/981

-- 
WNGS-RIPE



More information about the nginx mailing list