aboutsummaryrefslogtreecommitdiff
path: root/lib/vtls/nss.c
diff options
context:
space:
mode:
authorDaniel Stenberg <daniel@haxx.se>2019-04-29 08:00:49 +0200
committerDaniel Stenberg <daniel@haxx.se>2019-04-29 08:02:44 +0200
commit5fc28510a4664f46459d9a40187d81cc08571e60 (patch)
treeb6d15dac4952967aecf54af92f5a0f5ca10fcb66 /lib/vtls/nss.c
parent2fe2da9f1a6b059f94c28e963032539790dbcae5 (diff)
CURL_MAX_INPUT_LENGTH: largest acceptable string input size
This limits all accepted input strings passed to libcurl to be less than CURL_MAX_INPUT_LENGTH (8000000) bytes, for these API calls: curl_easy_setopt() and curl_url_set(). The 8000000 number is arbitrary picked and is meant to detect mistakes or abuse, not to limit actual practical use cases. By limiting the acceptable string lengths we also reduce the risk of integer overflows all over. NOTE: This does not apply to `CURLOPT_POSTFIELDS`. Test 1559 verifies. Closes #3805
Diffstat (limited to 'lib/vtls/nss.c')
0 files changed, 0 insertions, 0 deletions