generic-library/curl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

James Bursa found an ERRORBUFFFER overflow

Browse Source
This commit is contained in:
Daniel Stenberg
2003-10-26 15:42:21 +00:00
parent 4cccceb034
commit 54c6f2c7c0
2 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
CHANGES
View File

@@ -7,6 +7,13 @@
Changelog Changelog
Daniel (26 October)
- James Bursa found out that curl_msnprintf() could write the trailing
zero-byte outside its given buffer size. This could happen if you generated
a very long error message as then libcurl would overwrite the ERRORBUFFER
with one byte. Using a non-existing very long local file:// name is one case
that could make this occur.
Daniel (24 October) Daniel (24 October)
- David Hull filed bug report #829827. It identified a problem with -C - if - David Hull filed bug report #829827. It identified a problem with -C - if
the full file already was downloaded and thus the server responded with a the full file already was downloaded and thus the server responded with a

4
RELEASE-NOTES
View File

@@ -24,6 +24,7 @@ This release includes the following changes:
This release includes the following bugfixes: This release includes the following bugfixes:
o a rare ERRORBUFFER single-byte overflow was fixed
o HTTP-resuming an already downloaded file works better o HTTP-resuming an already downloaded file works better
o builds better on Solaris 8+ with gcc o builds better on Solaris 8+ with gcc
o --disable-eprt works now o --disable-eprt works now
@@ -81,6 +82,7 @@ advice from friends like these:
Neil Spring, Siddhartha Prakash Jain, Jon Turner, Vincent Bronner, Shard, Neil Spring, Siddhartha Prakash Jain, Jon Turner, Vincent Bronner, Shard,
Jeremy Friesner, Florian Schoppmann, Neil Dunbar, Frank Ticheler, Lachlan Jeremy Friesner, Florian Schoppmann, Neil Dunbar, Frank Ticheler, Lachlan
O'Dea, Dirk Manske, Domenico Andreoli, Gisle Vanem, Kimmo Kinnunen, Andrew O'Dea, Dirk Manske, Domenico Andreoli, Gisle Vanem, Kimmo Kinnunen, Andrew
Fuller, Georg Horn, Andr<64>s Garc<72>a, Dylan Ellicott, Kevin Roth, David Hull Fuller, Georg Horn, Andr<64>s Garc<72>a, Dylan Ellicott, Kevin Roth, David Hull,
James Bursa
Thanks! (and sorry if I forgot to mention someone) Thanks! (and sorry if I forgot to mention someone)