diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2018-03-24 23:47:41 +0100 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2018-05-14 07:40:31 +0200 |
| commit | 8c7b3737d29ed5c0575bf592063de8a51450812d (patch) | |
| tree | 6b5b9129617c308bee42ae6ea34c85b8ebafd562 /lib/http2.c | |
| parent | 1b55d270ad3d4473b2fd46481478275e47c60eaf (diff) | |
http: restore buffer pointer when bad response-line is parsed
... leaving the k->str could lead to buffer over-reads later on.
CVE: CVE-2018-1000301
Assisted-by: Max Dymond
Detected by OSS-Fuzz.
Bug: https://curl.haxx.se/docs/adv_2018-b138.html
Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7105
Diffstat (limited to 'lib/http2.c')
0 files changed, 0 insertions, 0 deletions