details: http://hg.nginx.org/nginx/rev/f6e7831a17d4 branches: changeset: 7348:f6e7831a17d4 user: Maxim Dounin <mdou...@mdounin.ru> date: Mon Sep 03 19:17:06 2018 +0300 description: Uwsgi: added a check on maximum uwsgi request size.
Requested by Chris Caputo. diffstat: src/http/modules/ngx_http_uwsgi_module.c | 6 ++++++ 1 files changed, 6 insertions(+), 0 deletions(-) diffs (16 lines): diff --git a/src/http/modules/ngx_http_uwsgi_module.c b/src/http/modules/ngx_http_uwsgi_module.c --- a/src/http/modules/ngx_http_uwsgi_module.c +++ b/src/http/modules/ngx_http_uwsgi_module.c @@ -960,6 +960,12 @@ ngx_http_uwsgi_create_request(ngx_http_r } #endif + if (len > 65535) { + ngx_log_error(NGX_LOG_ALERT, r->connection->log, 0, + "uwsgi request is too big: %uz", len); + return NGX_ERROR; + } + b = ngx_create_temp_buf(r->pool, len + 4); if (b == NULL) { return NGX_ERROR; _______________________________________________ nginx-devel mailing list nginx-devel@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx-devel