[curl/curl] 9d4f69: ntlm: precation against super huge type2 offsets
Daniel Stenberg <[email protected]>
| Newsgroups | gmane.comp.web.curl.cvs |
|---|---|
| Message-ID | <curl/curl/push/refs/heads/bagder/ntlm-type2-overflow/[email protected]> |
Branch: refs/heads/bagder/ntlm-type2-overflow
Home: https://github.com/curl/curl
Commit: 9d4f698523bc4fcbfe000d20876ad8c51702c4c8
https://github.com/curl/curl/commit/9d4f698523bc4fcbfe000d20876ad8c51702c4c8
Author: Daniel Stenberg <[email protected]>
Date: 2021-04-27 (Tue, 27 Apr 2021)
Changed paths:
M lib/vauth/ntlm.c
Log Message:
-----------
ntlm: precation against super huge type2 offsets
... which otherwise caused an integer overflow and circumvented the if()
conditional size check.
Detected by OSS-Fuzz
Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33720
Assisted-by: Max Dymond
_______________________________________________
curl-commits mailing list
[email protected]
https://cool.haxx.se/cgi-bin/mailman/listinfo/curl-commits