From 926cb9ff65b36697e189f8dcd6b75e6eea847123 Mon Sep 17 00:00:00 2001
From: Jay Satiro <raysatiro@yahoo.com>
Date: Thu, 30 Apr 2015 01:43:45 -0400
Subject: schannel: Fix out of bounds array

Bug born in changes made several days ago 9a91e80.

Bug: http://curl.haxx.se/mail/lib-2015-04/0199.html
Reported-by: Brian Chrisman
---
 lib/vtls/schannel.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'lib')

diff --git a/lib/vtls/schannel.c b/lib/vtls/schannel.c
index 74c32dfed..a42c88da6 100644
--- a/lib/vtls/schannel.c
+++ b/lib/vtls/schannel.c
@@ -283,7 +283,7 @@ schannel_connect_step2(struct connectdata *conn, int sockindex)
   struct ssl_connect_data *connssl = &conn->ssl[sockindex];
   unsigned char *reallocated_buffer;
   size_t reallocated_length;
-  SecBuffer outbuf[2];
+  SecBuffer outbuf[3];
   SecBufferDesc outbuf_desc;
   SecBuffer inbuf[2];
   SecBufferDesc inbuf_desc;
-- 
cgit v1.2.3