diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2017-11-10 08:52:45 +0100 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2017-11-27 08:19:34 +0100 |
| commit | 0b664ba968437715819bfe4c7ada5679d16ebbc3 (patch) | |
| tree | dc93d3b1c104f43a54b703bb69a71621c658cff8 /src/tool_strdup.c | |
| parent | 9b5e12a5491d2e6b68e0c88ca56f3a9ef9fba400 (diff) | |
wildcardmatch: fix heap buffer overflow in setcharset
The code would previous read beyond the end of the pattern string if the
match pattern ends with an open bracket when the default pattern
matching function is used.
Detected by OSS-Fuzz:
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4161
CVE-2017-8817
Bug: https://curl.haxx.se/docs/adv_2017-ae72.html
Diffstat (limited to 'src/tool_strdup.c')
0 files changed, 0 insertions, 0 deletions