diff options
author | Daniel Stenberg <daniel@haxx.se> | 2017-08-01 17:16:46 +0200 |
---|---|---|
committer | Daniel Stenberg <daniel@haxx.se> | 2017-08-07 09:24:30 +0200 |
commit | 358b2b131ad6c095696f20dcfa62b8305263f898 (patch) | |
tree | 43a86c450eceed59e6afbb1f5a5751782569d0b0 /lib/checksrc.pl | |
parent | c9332fa5e84f24da300b42b1a931ade929d3e27d (diff) |
tftp: reject file name lengths that don't fit
... and thereby avoid telling send() to send off more bytes than the
size of the buffer!
CVE-2017-1000100
Bug: https://curl.haxx.se/docs/adv_20170809B.html
Reported-by: Even Rouault
Credit to OSS-Fuzz for the discovery
Diffstat (limited to 'lib/checksrc.pl')
0 files changed, 0 insertions, 0 deletions