tree 0b4c0f6e13b4c4d832ddf55b15d2e67a8c887c0c
parent c4a9c46a2b6d824aba6cf8fc50f3b0fa6724cd86
author Maxim Dounin <mdounin@mdounin.ru> 1563463664 +0300
committer Maxim Dounin <mdounin@mdounin.ru> 1563463664 +0300

Core: fixed segfault with too large bucket sizes (ticket #1806).

To save memory hash code uses u_short to store resulting bucket sizes,
so maximum bucket size is limited to 65536 minus ngx_cacheline_size (larger
values will be aligned to 65536 which will overflow u_short).  However,
there were no checks to enforce this, and using larger bucket sizes
resulted in overflows and segmentation faults.

Appropriate safety checks to enforce this added to ngx_hash_init().