Some question about CVE-2020-8231

陈星杵 via curl-library <[email protected]>
Newsgroups gmane.comp.web.curl.library
Message-ID <[email protected]> 
Hello! Sorry to bother you. I notice that CVE-2020-8231[1] is a Expired Pointer Dereference Vulnerability, and the patch[2] fixes 5files. I know the c43127414d[3] is introduced commit of the lib/connect.c. At the same time, I find the introduced commit of the lib/multi.c is 575e885db0. So I want to know which one is the real Vulnerability introduced commit, and why?Thanks for your time!

	[1] https://curl.se/docs/CVE-2020-8231.html
	[2] https://github.com/curl/curl/commit/3c9e021f86872baae412
	[3] https://github.com/curl/curl/commit/c43127414d

	[4] https://github.com/curl/curl/commit/575e885db0

-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.