Changelog
+Daniel (4 March 2005)
+- Rene Rebe fixed a -# crash when more data than expected was retrieved.
+
Daniel (22 February 2005)
- NTLM and ftp-krb4 buffer overflow fixed, as reported here:
http://www.securityfocus.com/archive/1/391042 and the CAN report here:
This release includes the following bugfixes:
+ o -# crash when more data than expected was retrieved
o NTLM/krb4 buffer overflow fixed (CAN-2005-0490)
o proxy auth bug when following redirects to another host
o socket leak when local bind failed
advice from friends like these:
Gisle Vanem, David Byron, Marty Kuhrt, Maruko, Eric Vergnaud, Christopher
- R. Palmer, Mike Dobbs, David in bug report #1124588, Ralph Mitchell
+ R. Palmer, Mike Dobbs, David in bug report #1124588, Ralph Mitchell,
+ Rene Rebe
Thanks! (and sorry if I forgot to mention someone)
curl_off_t point = (curl_off_t)dlnow + (curl_off_t)ulnow +
bar->initial_size; /* we've come this far */
+ if(point > total)
+ /* we have got more than the expected total! */
+ total = point;
+
bar->calls++; /* simply count invokes */
if(total < 1) {