Description: Fix CVE-2026-42945 for buffer overrun in rewrite module
Origin: upstream, https://github.com/nginx/nginx/commit/524977e7c534e87e5b55739fa74601c9f1102686
Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/2152577
Applied-Upstream: version, 1.30.1
Reviewed-by: Thomas Ward <teward@ubuntu.com>
Last-Update: 2026-05-13
---
This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
--- a/src/http/ngx_http_script.c
+++ b/src/http/ngx_http_script.c
@@ -1164,6 +1164,7 @@ ngx_http_script_regex_end_code(ngx_http_
 
     r = e->request;
 
+    e->is_args = 0;
     e->quote = 0;
 
     ngx_log_debug0(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
