diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2017-09-25 00:35:22 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2017-10-02 07:50:17 +0200 |
| commit | 5ff2c5ff25750aba1a8f64fbcad8e5b891512584 (patch) | |
| tree | 25b6f46b52aa7271bb3255aa0907e968b024f0ce /lib/vtls/polarssl_threadlock.c | |
| parent | 440dbcb06e8dedba1551e32046a9415adb82eb0b (diff) | |
FTP: zero terminate the entry path even on bad input
... a single double quote could leave the entry path buffer without a zero
terminating byte. CVE-2017-1000254
Test 1152 added to verify.
Reported-by: Max Dymond
Bug: https://curl.haxx.se/docs/adv_20171004.html
Diffstat (limited to 'lib/vtls/polarssl_threadlock.c')
0 files changed, 0 insertions, 0 deletions