No description
Find a file
Maxim Dounin 3abd1c3ec2 SSL: fixed possible use-after-free in $ssl_server_name.
The $ssl_server_name variable used SSL_get_servername() result directly,
but this is not safe: it references a memory allocation in an SSL
session, and this memory might be freed at any time due to renegotiation.
Instead, copy the name to memory allocated from the pool.
2017-08-22 17:36:12 +03:00
auto Mirror module. 2017-07-20 08:50:49 +03:00
conf Added the REQUEST_SCHEME parameter. 2015-06-05 22:23:26 +03:00
contrib Contrib: proper syntax parsing in vim syntax highlighting. 2017-05-22 16:34:47 +03:00
docs nginx-1.13.4-RELEASE 2017-08-08 18:00:11 +03:00
misc Updated PCRE used for win32 builds. 2017-08-08 15:21:10 +03:00
src SSL: fixed possible use-after-free in $ssl_server_name. 2017-08-22 17:36:12 +03:00