b387560692
When duplicating a handle, the data to post was duplicated using strdup() when it could be binary and contain zeroes and it was not even zero terminated! This caused read out of bounds crashes/segfaults. Since the lib/strdup.c file no longer is easily shared with the curl tool with this change, it now uses its own version instead. Bug: http://curl.haxx.se/docs/adv_20141105.html CVE: CVE-2014-3707 Reported-By: Symeon Paraschoudis
114 lines
2.2 KiB
Makefile
114 lines
2.2 KiB
Makefile
# ./src/Makefile.inc
|
|
# Using the backslash as line continuation character might be problematic
|
|
# with some make flavours, as Watcom's wmake showed us already. If we
|
|
# ever want to change this in a portable manner then we should consider
|
|
# this idea (posted to the libcurl list by Adam Kellas):
|
|
# CSRC1 = file1.c file2.c file3.c
|
|
# CSRC2 = file4.c file5.c file6.c
|
|
# CSOURCES = $(CSRC1) $(CSRC2)
|
|
|
|
# libcurl has sources that provide functions named curlx_* that aren't part of
|
|
# the official API, but we re-use the code here to avoid duplication.
|
|
CURLX_CFILES = \
|
|
../lib/strtoofft.c \
|
|
../lib/rawstr.c \
|
|
../lib/nonblock.c \
|
|
../lib/warnless.c
|
|
|
|
CURLX_HFILES = \
|
|
../lib/curl_setup.h \
|
|
../lib/strtoofft.h \
|
|
../lib/rawstr.h \
|
|
../lib/nonblock.h \
|
|
../lib/warnless.h
|
|
|
|
CURL_CFILES = \
|
|
tool_binmode.c \
|
|
tool_bname.c \
|
|
tool_cb_dbg.c \
|
|
tool_cb_hdr.c \
|
|
tool_cb_prg.c \
|
|
tool_cb_rea.c \
|
|
tool_cb_see.c \
|
|
tool_cb_wrt.c \
|
|
tool_cfgable.c \
|
|
tool_convert.c \
|
|
tool_dirhie.c \
|
|
tool_doswin.c \
|
|
tool_easysrc.c \
|
|
tool_formparse.c \
|
|
tool_getparam.c \
|
|
tool_getpass.c \
|
|
tool_help.c \
|
|
tool_helpers.c \
|
|
tool_homedir.c \
|
|
tool_hugehelp.c \
|
|
tool_libinfo.c \
|
|
tool_main.c \
|
|
tool_metalink.c \
|
|
tool_mfiles.c \
|
|
tool_msgs.c \
|
|
tool_operate.c \
|
|
tool_operhlp.c \
|
|
tool_panykey.c \
|
|
tool_paramhlp.c \
|
|
tool_parsecfg.c \
|
|
tool_strdup.c \
|
|
tool_setopt.c \
|
|
tool_sleep.c \
|
|
tool_urlglob.c \
|
|
tool_util.c \
|
|
tool_vms.c \
|
|
tool_writeenv.c \
|
|
tool_writeout.c \
|
|
tool_xattr.c
|
|
|
|
CURL_HFILES = \
|
|
tool_binmode.h \
|
|
tool_bname.h \
|
|
tool_cb_dbg.h \
|
|
tool_cb_hdr.h \
|
|
tool_cb_prg.h \
|
|
tool_cb_rea.h \
|
|
tool_cb_see.h \
|
|
tool_cb_wrt.h \
|
|
tool_cfgable.h \
|
|
tool_convert.h \
|
|
tool_dirhie.h \
|
|
tool_doswin.h \
|
|
tool_easysrc.h \
|
|
tool_formparse.h \
|
|
tool_getparam.h \
|
|
tool_getpass.h \
|
|
tool_help.h \
|
|
tool_helpers.h \
|
|
tool_homedir.h \
|
|
tool_hugehelp.h \
|
|
tool_libinfo.h \
|
|
tool_main.h \
|
|
tool_metalink.h \
|
|
tool_mfiles.h \
|
|
tool_msgs.h \
|
|
tool_operate.h \
|
|
tool_operhlp.h \
|
|
tool_panykey.h \
|
|
tool_paramhlp.h \
|
|
tool_parsecfg.h \
|
|
tool_sdecls.h \
|
|
tool_setopt.h \
|
|
tool_setup.h \
|
|
tool_sleep.h \
|
|
tool_strdup.h \
|
|
tool_urlglob.h \
|
|
tool_util.h \
|
|
tool_version.h \
|
|
tool_vms.h \
|
|
tool_writeenv.h \
|
|
tool_writeout.h \
|
|
tool_xattr.h
|
|
|
|
CURL_RCFILES = curl.rc
|
|
|
|
curl_SOURCES = $(CURL_CFILES) $(CURLX_CFILES) $(CURL_HFILES)
|
|
|