]> granicus.if.org Git - curl/commit
formdata: Check if length is too large for memory
authorJay Satiro <raysatiro@yahoo.com>
Mon, 7 Dec 2015 07:43:24 +0000 (02:43 -0500)
committerJay Satiro <raysatiro@yahoo.com>
Mon, 7 Dec 2015 07:43:24 +0000 (02:43 -0500)
commit738b0ba09eb0b9e662dea3c436a88d505195f5e4
treed28ccc2a83e4929d3d86b238443b2aaa1578157b
parenta62000ecc9edf38a843cd8da7868fa976fec1ba2
formdata: Check if length is too large for memory

- If the size of the length type (curl_off_t) is greater than the size
of the size_t type then check before allocating memory to make sure the
value of length will fit in a size_t without overflow. If it doesn't
then return CURLE_BAD_FUNCTION_ARGUMENT.

Bug: https://github.com/bagder/curl/issues/425#issuecomment-154518679
Reported-by: Steve Holme
lib/formdata.c