]> granicus.if.org Git - curl/commitdiff
schannel: Fix out of bounds array
authorJay Satiro <raysatiro@yahoo.com>
Thu, 30 Apr 2015 05:43:45 +0000 (01:43 -0400)
committerJay Satiro <raysatiro@yahoo.com>
Thu, 30 Apr 2015 05:44:45 +0000 (01:44 -0400)
Bug born in changes made several days ago 9a91e80.

Bug: http://curl.haxx.se/mail/lib-2015-04/0199.html
Reported-by: Brian Chrisman
lib/vtls/schannel.c

index 74c32dfed2ab77936ceeb0fe1172fc2a714df963..a42c88da6d4ef7b0b99faa6101d2a5ea19ea45f8 100644 (file)
@@ -283,7 +283,7 @@ schannel_connect_step2(struct connectdata *conn, int sockindex)
   struct ssl_connect_data *connssl = &conn->ssl[sockindex];
   unsigned char *reallocated_buffer;
   size_t reallocated_length;
-  SecBuffer outbuf[2];
+  SecBuffer outbuf[3];
   SecBufferDesc outbuf_desc;
   SecBuffer inbuf[2];
   SecBufferDesc inbuf_desc;