commit 7f819d81d18499a1599a922c88e833f2a7986b7a
author Maxim Dounin <mdounin@mdounin.ru> Tue Oct 08 21:56:14 2019 +0300
committer Maxim Dounin <mdounin@mdounin.ru> Tue Oct 08 21:56:14 2019 +0300
tree baf5c574f74b8786a4ffed535f1e98bb36f0ffa3
parent f008a56308439e6501cd111e12a319fa9572e939

Fixed URI normalization with merge_slashes switched off.

Previously, "/foo///../bar" was normalized into "/foo/bar"
instead of "/foo//bar".

src/http/ngx_http_parse.c

diff --git a/src/http/ngx_http_parse.c b/src/http/ngx_http_parse.c
index ed5cf75..aa56b97 100644
--- a/src/http/ngx_http_parse.c
+++ b/src/http/ngx_http_parse.c
@@ -1471,7 +1471,7 @@
             case '/':
             case '?':
             case '#':
-                u -= 5;
+                u -= 4;
                 for ( ;; ) {
                     if (u < r->uri.data) {
                         return NGX_HTTP_PARSE_INVALID_REQUEST;
@@ -1575,7 +1575,7 @@
         u--;
 
     } else if (state == sw_dot_dot) {
-        u -= 5;
+        u -= 4;
 
         for ( ;; ) {
             if (u < r->uri.data) {