]> git.kaiwu.me - nginx.git/commit
Memcached: respect the end marker in the maximum supported length
authorVadim Zhestikov <v.zhestikov@f5.com>
Tue, 11 Aug 2026 18:06:28 +0000 (11:06 -0700)
committerVadimZhestikov <108960056+VadimZhestikov@users.noreply.github.com>
Tue, 25 Aug 2026 21:35:31 +0000 (14:35 -0700)
commit9b76c21b01b75f4b82f1f467ca5397be2c943253
tree572ce1e29f21ae4210da99e76020db5b90e1e8ee
parent76364bdd29acef7698b0a73d4bc65f2e91eb50f4
Memcached: respect the end marker in the maximum supported length

The length in the "VALUE" line was accepted up to NGX_MAX_OFF_T_VALUE,
while ngx_http_memcached_filter_init() adds the size of the end marker
to it.  With lengths close to the maximum this overflowed u->length.

Now such lengths are rejected, similarly to other invalid lengths.
src/http/modules/ngx_http_memcached_module.c