Debian Patches

Status for libnginx-mod-nchan/1:1.3.8+dfsg-2

Patch Description Author Forwarded Bugs Origin Last update
Fix-segfault-with-realip-module.patch Fix segfault when fake request interacts with ngx_http_realip_module

Initialize sockaddr for fake connection to prevent null pointer dereference
in ngx_cidr_match() called by ngx_http_realip_module.

Problem:
- nchan creates fake requests with sockaddr == NULL
- realip module calls ngx_cidr_match(sa=0x0) causing segfault

Solution:
- Allocate and initialize sockaddr in nchan_create_fake_connection()
- Use loopback address (127.0.0.1) as dummy sockaddr

Tested with:
- nginx 1.30.1
- nchan 1.3.8
den <den@dens-MacBook-Pro.local> no upstream, https://github.com/slact/nchan/commit/b423eefa2c0f617f18fc1c6e2704c16b5954a472 2026-05-19

All known versions for source package 'libnginx-mod-nchan'

Links