[curl/curl] 3e820f: ntlm: precaution against super huge type2 offsets
Daniel Stenberg <[email protected]>
| Newsgroups | gmane.comp.web.curl.cvs |
|---|---|
| Message-ID | <curl/curl/push/refs/heads/master/[email protected]> |
Branch: refs/heads/master
Home: https://github.com/curl/curl
Commit: 3e820fbf25f38743fd30e0ce96ba9ae34791aa7c
https://github.com/curl/curl/commit/3e820fbf25f38743fd30e0ce96ba9ae34791aa7c
Author: Daniel Stenberg <[email protected]>
Date: 2021-04-27 (Tue, 27 Apr 2021)
Changed paths:
M lib/vauth/ntlm.c
Log Message:
-----------
ntlm: precaution against super huge type2 offsets
... which otherwise caused an integer overflow and circumvented the if()
conditional size check.
Detected by OSS-Fuzz
Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33720
Assisted-by: Max Dymond
Closes #6975
_______________________________________________
curl-commits mailing list
[email protected]
https://cool.haxx.se/cgi-bin/mailman/listinfo/curl-commits