]> git.kaiwu.me - nginx.git/commit
Script: improved compatibility of complex value codes
authorAleksei Bavshin <a.bavshin@nginx.com>
Thu, 16 Jul 2026 15:53:21 +0000 (08:53 -0700)
committerAleksei Bavshin <a.bavshin@f5.com>
Wed, 29 Jul 2026 19:29:23 +0000 (12:29 -0700)
commit4b90ec769235877ece7e104d992d17db665806da
tree0ab741f14af5bccf975b42d32c5166d8b1e28db2
parent03baa844a9620a573fa810cf6626117c8576cd2e
Script: improved compatibility of complex value codes

In a8289aa69c74, we introduced a new code to finalize the evaluation of
a complex value, deferring the stack update to this new code.  However,
the change inadvertently broke compatibility with several third-party
modules that were reusing ngx_http_script_complex_value_code.

This change relegates omitted ngx_http_script_complex_value_end_code
from crash to a potential read of uninitialized bytes at the end of the
allocated buffer.
src/http/ngx_http_script.c