]> granicus.if.org Git - curl/commit
projects / curl / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 19ebc28) | patch
Curl_ntlm_core_mk_nt_hash: return error on too long password
authorDaniel Stenberg <daniel@haxx.se>
Mon, 13 Aug 2018 08:35:52 +0000 (10:35 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Mon, 3 Sep 2018 05:42:37 +0000 (07:42 +0200)
commit57d299a499155d4b327e341c6024e293b0418243
tree8eabfe89955a2dc43cbc6b46f0a9778b6bcc9c3dtree | snapshot
parent19ebc282172ff204648f350c6e716197d5b4d221commit | diff
Curl_ntlm_core_mk_nt_hash: return error on too long password

... since it would cause an integer overflow if longer than (max size_t
/ 2).

This is CVE-2018-14618

Bug: https://curl.haxx.se/docs/CVE-2018-14618.html
Closes #2756
Reported-by: Zhaoyang Wu
lib/curl_ntlm_core.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.