Some questions about CVE-2017-7407
陈星杵 via curl-library <[email protected]>
| Newsgroups | gmane.comp.web.curl.library |
|---|---|
| Message-ID | <[email protected]> |
Hello, Sorry to bother you. I noticed that the "introduce commit" listed on the "https://curl.se/docs/CVE-2017-7407.html"is 90030a49c7facfefeca8, but when I checked the commit, there were no related code changes. I also found that commit "dfec172157" is the initial commit where the vulnerability file was introduced. So the truth introduce commit is "dfec172157"? Thanks. Reference： https://curl.se/docs/CVE-2017-7407.html https://github.com/curl/curl/commit/90030a49c7facfefeca8 https://github.com/curl/curl/commit/dfec172157 -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.html