tree 02d1feaaef48dda559580d08ab4ac6b5ff129b26
parent de3c7a825ee446fe4e0dc84df3d57bfebdf8c6f6
author Valentin Bartenev <vbart@nginx.com> 1396022707 +0400
committer Valentin Bartenev <vbart@nginx.com> 1396022707 +0400

SPDY: fixed the DATA frame length handling in case of some errors.

There are a few cases in ngx_http_spdy_state_read_data() related to error
handling when ngx_http_spdy_state_skip() might be called with an inconsistent
state between *pos and sc->length, that leads to violation of frame layout
parsing and resuted in corruption of spdy connection.

Based on a patch by Xiaochen Wang.