diff options
author | Daniel Stenberg <daniel@haxx.se> | 2020-05-13 00:52:34 +0200 |
---|---|---|
committer | Daniel Stenberg <daniel@haxx.se> | 2020-05-13 08:02:42 +0200 |
commit | e1f3f3a14f678a8469ffd2d032fa1a237a6aad98 (patch) | |
tree | f8a1cb5042189e31cf87203947b9b177aa3739c1 /lib/vtls/mesalink.h | |
parent | 3ff89286a99b41f8b63a0ac9c55f6383e9f3bc53 (diff) |
url: reject too long input when parsing credentials
Since input passed to libcurl with CURLOPT_USERPWD and
CURLOPT_PROXYUSERPWD circumvents the regular string length check we have
in Curl_setstropt(), the input length limit is enforced in
Curl_parse_login_details too, separately.
Reported-by: Thomas Bouzerar
Closes #5383
Diffstat (limited to 'lib/vtls/mesalink.h')
0 files changed, 0 insertions, 0 deletions