[pkgsrc/trunk]: pkgsrc/www/nginx Add patch from upstream to address CVE-2019-...

[kim <kim%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/8d500b24f40a
branches:  trunk
changeset: 409589:8d500b24f40a
user:      kim <kim%pkgsrc.org@localhost>
date:      Sun Jan 19 07:28:36 2020 +0000

description:
Add patch from upstream to address CVE-2019-20372. Bump revision.

diffstat:

 www/nginx/Makefile                                              |   4 +-
 www/nginx/distinfo                                              |   3 +-
 www/nginx/patches/patch-src_http_ngx__http__special__response.c |  21 ++++++++++
 3 files changed, 25 insertions(+), 3 deletions(-)

diffs (53 lines):

diff -r 940ffe3e49e9 -r 8d500b24f40a www/nginx/Makefile
--- a/www/nginx/Makefile        Sun Jan 19 03:31:46 2020 +0000
+++ b/www/nginx/Makefile        Sun Jan 19 07:28:36 2020 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.86 2020/01/18 21:51:09 jperkin Exp $
+# $NetBSD: Makefile,v 1.87 2020/01/19 07:28:36 kim Exp $
 
 DISTNAME=      nginx-1.16.1
 
 MAINTAINER=    joerg%NetBSD.org@localhost
 
-PKGREVISION= 1
+PKGREVISION= 2
 .include "../../www/nginx/Makefile.common"
diff -r 940ffe3e49e9 -r 8d500b24f40a www/nginx/distinfo
--- a/www/nginx/distinfo        Sun Jan 19 03:31:46 2020 +0000
+++ b/www/nginx/distinfo        Sun Jan 19 07:28:36 2020 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.70 2019/08/15 08:06:29 adam Exp $
+$NetBSD: distinfo,v 1.71 2020/01/19 07:28:36 kim Exp $
 
 SHA1 (array-var-nginx-module-0.05.tar.gz) = c69fac77814947009ab783a471783b3c95a63a26
 RMD160 (array-var-nginx-module-0.05.tar.gz) = 89bd4efc04864e3e90781588a337338951ec8733
@@ -53,3 +53,4 @@
 SHA1 (patch-auto_cc_conf) = 5e6a479ba419cd16dedeb3b4c47dc685d126ef6a
 SHA1 (patch-auto_lib_pcre_conf) = 8cf03fe38e7f75ef6892cc8b93be5cb18c381e97
 SHA1 (patch-src_event_modules_ngx__eventport__module.c) = c8e919f48d68bd5bffc4ad11d9c79dc6da3a0de2
+SHA1 (patch-src_http_ngx__http__special__response.c) = ab1fcd9727d13b3d8697bc16a7bacce7718e8b4c
diff -r 940ffe3e49e9 -r 8d500b24f40a www/nginx/patches/patch-src_http_ngx__http__special__response.c
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/www/nginx/patches/patch-src_http_ngx__http__special__response.c   Sun Jan 19 07:28:36 2020 +0000
@@ -0,0 +1,21 @@
+$NetBSD: patch-src_http_ngx__http__special__response.c,v 1.1 2020/01/19 07:28:36 kim Exp $
+
+Discard request body when redirecting to a URL via error_page.
+
+https://github.com/nginx/nginx/commit/c1be55f97211d38b69ac0c2027e6812ab8b1b94e.patch
+
+--- src/http/ngx_http_special_response.c
++++ src/http/ngx_http_special_response.c
+@@ -623,6 +623,12 @@ ngx_http_send_error_page(ngx_http_request_t *r, ngx_http_err_page_t *err_page)
+         return ngx_http_named_location(r, &uri);
+     }
+ 
++    r->expect_tested = 1;
++
++    if (ngx_http_discard_request_body(r) != NGX_OK) {
++        r->keepalive = 0;
++    }
++
+     location = ngx_list_push(&r->headers_out.headers);
+ 
+     if (location == NULL) {