diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2003-10-26 15:42:21 +0000 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2003-10-26 15:42:21 +0000 |
| commit | 54c6f2c7c05d33859789bc3a1754805ee31c6edb (patch) | |
| tree | 75405982126e2e139fd6f956802d0f3bd4263e4a | |
| parent | 4cccceb0342c59441c6ae693612c557dbebcc03a (diff) | |
James Bursa found an ERRORBUFFFER overflow
| -rw-r--r-- | CHANGES | 7 | ||||
| -rw-r--r-- | RELEASE-NOTES | 4 |
2 files changed, 10 insertions, 1 deletions
@@ -7,6 +7,13 @@ Changelog +Daniel (26 October) +- James Bursa found out that curl_msnprintf() could write the trailing + zero-byte outside its given buffer size. This could happen if you generated + a very long error message as then libcurl would overwrite the ERRORBUFFER + with one byte. Using a non-existing very long local file:// name is one case + that could make this occur. + Daniel (24 October) - David Hull filed bug report #829827. It identified a problem with -C - if the full file already was downloaded and thus the server responded with a diff --git a/RELEASE-NOTES b/RELEASE-NOTES index 299f87b30..f5d1cd081 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -24,6 +24,7 @@ This release includes the following changes: This release includes the following bugfixes: + o a rare ERRORBUFFER single-byte overflow was fixed o HTTP-resuming an already downloaded file works better o builds better on Solaris 8+ with gcc o --disable-eprt works now @@ -81,6 +82,7 @@ advice from friends like these: Neil Spring, Siddhartha Prakash Jain, Jon Turner, Vincent Bronner, Shard, Jeremy Friesner, Florian Schoppmann, Neil Dunbar, Frank Ticheler, Lachlan O'Dea, Dirk Manske, Domenico Andreoli, Gisle Vanem, Kimmo Kinnunen, Andrew - Fuller, Georg Horn, Andrés García, Dylan Ellicott, Kevin Roth, David Hull + Fuller, Georg Horn, Andrés García, Dylan Ellicott, Kevin Roth, David Hull, + James Bursa Thanks! (and sorry if I forgot to mention someone) |