]> granicus.if.org Git - curl/commit
projects / curl / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1b55d27) | patch
http: restore buffer pointer when bad response-line is parsed
authorDaniel Stenberg <daniel@haxx.se>
Sat, 24 Mar 2018 22:47:41 +0000 (23:47 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Mon, 14 May 2018 05:40:31 +0000 (07:40 +0200)
commit8c7b3737d29ed5c0575bf592063de8a51450812d
tree6b5b9129617c308bee42ae6ea34c85b8ebafd562tree | snapshot
parent1b55d270ad3d4473b2fd46481478275e47c60eafcommit | diff
http: restore buffer pointer when bad response-line is parsed

... leaving the k->str could lead to buffer over-reads later on.

CVE: CVE-2018-1000301
Assisted-by: Max Dymond
Detected by OSS-Fuzz.
Bug: https://curl.haxx.se/docs/adv_2018-b138.html
Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7105
lib/http.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.