Merge pull request alibaba#909 from hongxiaolong/CVE-2017-7529

Patch for CVE-2017-7529
CapHuang0511 · Jul 12, 2017 · 4c36c5d · 4c36c5d
2 parents 39f6b6c + 4621add
commit 4c36c5d
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/http/modules/ngx_http_range_filter_module.c b/src/http/modules/ngx_http_range_filter_module.c
@@ -364,6 +364,10 @@ ngx_http_range_parse(ngx_http_request_t *r, ngx_http_range_filter_ctx_t *ctx,
             range->start = start;
             range->end = end;
 
+            if (size > NGX_MAX_OFF_T_VALUE - (end - start)) {
+                return NGX_HTTP_RANGE_NOT_SATISFIABLE;
+            }
+
             size += end - start;
 
             if (ranges-- == 0) {