From 52db54869e628c5b13039ecc2b4757f8eb969834 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Mon, 5 Nov 2018 11:57:29 +0100 Subject: curl: fix --local-port integer overflow The tool's local port command line range parser didn't check for integer overflows and could pass "weird" data to libcurl for this option. libcurl however, has a strict range check for the values so it rejects anything outside of the accepted range. Reported-by: Brian Carpenter Closes #3242 --- src/tool_cfgable.h | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'src/tool_cfgable.h') diff --git a/src/tool_cfgable.h b/src/tool_cfgable.h index b719fa219..501c96189 100644 --- a/src/tool_cfgable.h +++ b/src/tool_cfgable.h @@ -69,8 +69,8 @@ struct OperationConfig { char *headerfile; char *ftpport; char *iface; - int localport; - int localportrange; + long localport; + long localportrange; unsigned short porttouse; char *range; long low_speed_limit; -- cgit v1.2.3