News for hackers. Stuff that matters.
Re:Nginx security advisory (CVE-2013-2028) by paraboul on Tuesday May 07, 2013 @10:43AM (#5668366)
That's because c1 is always 'O' (in order to compare things like : 'POST', 'COPY', 'MOVE', etc.)

In the first case, comparing 2 integer (4x 8bit) is faster than omitting one byte.

That's is, using ngx_str3Ocmp with c1 != 'O' would be a usage error.

Edit: sltkr, sorry didn't see your reply.

There are no comments on this comment yet.