diff options
author | NGINX team <nginx@nginx.org> | 2012-04-12 13:05:40 +0000 |
---|---|---|
committer | Jon Kolb <jon@b0g.us> | 2012-04-12 13:05:40 +0000 |
commit | ed2df87c83d3a68ab2a395d4c2549dbe26e86ab0 (patch) | |
tree | ff91c69d84d5e4b84a15a12b873c3cb2193fd481 /src/core/ngx_connection.c | |
parent | 60a50f7b445d1ac18ea0b1ff140745b6844c6794 (diff) | |
download | nginx-ed2df87c83d3a68ab2a395d4c2549dbe26e86ab0.tar.gz |
*) Security: specially crafted mp4 file might allow to overwrite memory
locations in a worker process if the ngx_http_mp4_module was used,
potentially resulting in arbitrary code execution (CVE-2012-2089).
Thanks to Matthew Daley.
*) Bugfix: nginx/Windows might be terminated abnormally.
Thanks to Vincent Lee.
*) Bugfix: nginx hogged CPU if all servers in an upstream were marked as
"backup".
*) Bugfix: the "allow" and "deny" directives might be inherited
incorrectly if they were used with IPv6 addresses.
*) Bugfix: the "modern_browser" and "ancient_browser" directives might
be inherited incorrectly.
*) Bugfix: timeouts might be handled incorrectly on Solaris/SPARC.
*) Bugfix: in the ngx_http_mp4_module.
Diffstat (limited to 'src/core/ngx_connection.c')
-rw-r--r-- | src/core/ngx_connection.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/core/ngx_connection.c b/src/core/ngx_connection.c index 4d1aa0d1b..ba1b3f9e2 100644 --- a/src/core/ngx_connection.c +++ b/src/core/ngx_connection.c @@ -708,7 +708,7 @@ ngx_close_listening_sockets(ngx_cycle_t *cycle) /* * it seems that Linux-2.6.x OpenVZ sends events * for closed shared listening sockets unless - * the events was explicity deleted + * the events was explicitly deleted */ ngx_del_event(c->read, NGX_READ_EVENT, 0); |