Fixed ngx_parse_size() / ngx_parse_offset() with 0-length strings.
diff --git a/src/core/ngx_parse.c b/src/core/ngx_parse.c index 7b60c5f..d35e60f 100644 --- a/src/core/ngx_parse.c +++ b/src/core/ngx_parse.c
@@ -17,6 +17,11 @@ ssize_t size, scale, max; len = line->len; + + if (len == 0) { + return NGX_ERROR; + } + unit = line->data[len - 1]; switch (unit) { @@ -58,6 +63,11 @@ size_t len; len = line->len; + + if (len == 0) { + return NGX_ERROR; + } + unit = line->data[len - 1]; switch (unit) {