From 5ff2c5ff25750aba1a8f64fbcad8e5b891512584 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Mon, 25 Sep 2017 00:35:22 +0200 Subject: FTP: zero terminate the entry path even on bad input ... a single double quote could leave the entry path buffer without a zero terminating byte. CVE-2017-1000254 Test 1152 added to verify. Reported-by: Max Dymond Bug: https://curl.haxx.se/docs/adv_20171004.html --- tests/data/Makefile.inc | 1 + 1 file changed, 1 insertion(+) (limited to 'tests/data/Makefile.inc') diff --git a/tests/data/Makefile.inc b/tests/data/Makefile.inc index 823d27548..28af588ed 100644 --- a/tests/data/Makefile.inc +++ b/tests/data/Makefile.inc @@ -122,6 +122,7 @@ test1120 test1121 test1122 test1123 test1124 test1125 test1126 test1127 \ test1128 test1129 test1130 test1131 test1132 test1133 test1134 test1135 \ test1136 test1137 test1138 test1139 test1140 test1141 test1142 test1143 \ test1144 test1145 test1146 test1147 test1148 test1149 test1150 test1151 \ +test1152 \ \ test1160 test1161 \ test1200 test1201 test1202 test1203 test1204 test1205 test1206 test1207 \ -- cgit v1.2.3