SOURCES: nginx-autoindexDoS.patch (NEW) - close open dir after HEAD

areq areq at pld-linux.org
Sat Sep 22 20:06:11 CEST 2007


Author: areq                         Date: Sat Sep 22 18:06:11 2007 GMT
Module: SOURCES                       Tag: HEAD
---- Log message:
- close open dir after HEAD

---- Files affected:
SOURCES:
   nginx-autoindexDoS.patch (NONE -> 1.1)  (NEW)

---- Diffs:

================================================================
Index: SOURCES/nginx-autoindexDoS.patch
diff -u /dev/null SOURCES/nginx-autoindexDoS.patch:1.1
--- /dev/null	Sat Sep 22 20:06:11 2007
+++ SOURCES/nginx-autoindexDoS.patch	Sat Sep 22 20:06:06 2007
@@ -0,0 +1,16 @@
+Index: src/http/modules/ngx_http_autoindex_module.c
+===================================================================
+--- src/http/modules/ngx_http_autoindex_module.c	(revision 818)
++++ src/http/modules/ngx_http_autoindex_module.c	(working copy)
+@@ -236,6 +236,11 @@
+     rc = ngx_http_send_header(r);
+ 
+     if (rc == NGX_ERROR || rc > NGX_OK || r->header_only) {
++        if (ngx_close_dir(&dir) == NGX_ERROR) {
++            ngx_log_error(NGX_LOG_ALERT, r->connection->log, ngx_errno,
++                          ngx_close_dir_n " \"%V\" failed", &path);
++        }
++
+         return rc;
+     }
+ 
================================================================


More information about the pld-cvs-commit mailing list