Potential null dereference in ngx_time.c

[leeriorio]

In results of static analyze of nginx sources I founded potential null dereference

nginx/src/os/unix/ngx_time.c

Lines 48 to 50 in 00637cc

	t = localtime(&s);
	strftime(buf, 4, "%H", t);

localtime() function potentially can return NULL value, which will dereference in strftime(). How about to add check for this case?

[arut]

According to glibc source, this can only happen if there's an overflow in the year field: year - 1900 is out of 32-bit. While it makes no sense, this should be fixed anyway. Thanks for finding this,