diff options
author | Jay Satiro <raysatiro@yahoo.com> | 2019-07-23 17:59:18 -0400 |
---|---|---|
committer | Jay Satiro <raysatiro@yahoo.com> | 2019-07-25 22:24:06 -0400 |
commit | 78ed3abe11de0d8fe465dee6d1de0c1b973f4409 (patch) | |
tree | a03e9b93f0b8131930579dbb6ee862ff6b29c678 /src/tool_util.h | |
parent | fd5ab4358f09fafc83fc82ffd88c2c0b1c534c15 (diff) |
easy: resize receive buffer on easy handle reset
- In curl_easy_reset attempt to resize the receive buffer to its default
size. If realloc fails then continue using the previous size.
Prior to this change curl_easy_reset did not properly handle resetting
the receive buffer (data->state.buffer). It reset the variable holding
its size (data->set.buffer_size) to the default size (READBUFFER_SIZE)
but then did not actually resize the buffer. If a user resized the
buffer by using CURLOPT_BUFFERSIZE to set the size smaller than the
default, later called curl_easy_reset and attempted to reuse the handle
then a heap overflow would very likely occur during that handle's next
transfer.
Reported-by: Felix Hädicke
Fixes https://github.com/curl/curl/issues/4143
Closes https://github.com/curl/curl/pull/4145
Diffstat (limited to 'src/tool_util.h')
0 files changed, 0 insertions, 0 deletions