]> granicus.if.org Git - curl/commit
cookie: Guard against possible NULL ptr deref
authorDaniel Gustafsson <daniel@yesql.se>
Wed, 1 May 2019 11:14:15 +0000 (13:14 +0200)
committerDaniel Gustafsson <daniel@yesql.se>
Wed, 1 May 2019 11:14:15 +0000 (13:14 +0200)
commitb45fd8938e534091b4be2051093c6f38b8771ec8
treedc11565c69790cc131bfccfa2689a0cb24444609
parentb898b4c06cf8f821fbcd27808f42115b16a151b0
cookie: Guard against possible NULL ptr deref

In case the name pointer isn't set (due to memory pressure most likely)
we need to skip the prefix matching and reject with a badcookie to avoid
a possible NULL pointer dereference.

Closes #3820 #3821
Reported-by: Jonathan Moerman
Reviewed-by: Daniel Stenberg <daniel@haxx.se>
lib/cookie.c