Ticket #2058: ngx-catch-body.patch

ngx_http_catch_body_filter_module.c

@@ -72 +72 @@
     u_char                      *p;
     ngx_chain_t                 *cl;
     ngx_http_catch_body_conf_t  *conf;
+    int count = 0;
+    int len;
 
     conf = ngx_http_get_module_loc_conf(r, ngx_http_catch_body_filter_module);
 
@@ -85 +87 @@
     for (cl = in; cl; cl = cl->next) {
 
         p = cl->buf->pos;
+        len = cl->buf->last - p;
+        count += len;
 
         for (p = cl->buf->pos; p < cl->buf->last; p++) {
 
@@ -108 +112 @@
             }
         }
     }
+    if (count == 0) {
+                ngx_log_debug0(NGX_LOG_DEBUG_HTTP, r->connection->log, 0, "catch body: wrong length");
+                r->keepalive = 0;
+                return NGX_HTTP_BAD_REQUEST;
+    }
 
     return ngx_http_next_request_body_filter(r, in);
 }