diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2017-08-01 17:16:46 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2017-08-07 09:24:30 +0200 |
| commit | 358b2b131ad6c095696f20dcfa62b8305263f898 (patch) | |
| tree | 43a86c450eceed59e6afbb1f5a5751782569d0b0 /docs/libcurl/curl_multi_strerror.3 | |
| parent | c9332fa5e84f24da300b42b1a931ade929d3e27d (diff) | |
tftp: reject file name lengths that don't fit
... and thereby avoid telling send() to send off more bytes than the
size of the buffer!
CVE-2017-1000100
Bug: https://curl.haxx.se/docs/adv_20170809B.html
Reported-by: Even Rouault
Credit to OSS-Fuzz for the discovery
Diffstat (limited to 'docs/libcurl/curl_multi_strerror.3')
0 files changed, 0 insertions, 0 deletions