Go to file
Jay Satiro 21575b26fe libssh2: fix crash in keyboard callback
- Always set the libssh2 'abstract' user-pointer to the libcurl easy
  handle associated with the ssh session, so it is always passed to the
  ssh keyboard callback.

Prior to this change and since 8b5f100 (precedes curl 8.0.0), if libcurl
was built without CURL_DEBUG then it could crash during the ssh auth
phase due to a null dereference in the ssh keyboard callback.

Reported-by: Andreas Falkenhahn

Fixes https://github.com/curl/curl/pull/11024
Closes https://github.com/curl/curl/pull/11026
2023-04-26 15:04:29 -04:00
.circleci
.github CI: don't run CI jobs if only another CI was changed 2023-04-24 20:46:09 -07:00
.lift
.reuse
CMake cmake: speed up and extend picky clang/gcc options 2023-04-16 22:28:25 +00:00
docs docs: clarify that more backends have HTTPS proxy support 2023-04-26 16:28:12 +02:00
include CURLPROXY_HTTPS2: for HTTPS proxy that may speak HTTP/2 2023-04-08 00:27:53 +02:00
lib libssh2: fix crash in keyboard callback 2023-04-26 15:04:29 -04:00
LICENSES
m4 autotools: sync up clang picky warnings with cmake 2023-04-17 11:35:56 +00:00
packages OS400: provide ILE/RPG usage examples 2023-04-18 16:14:00 -04:00
plan9
projects
scripts
src src/tool_operhlp.c: fix value stored to 'uerr' is never read 2023-04-17 09:07:07 +02:00
tests man pages: simplify the .TH sections 2023-04-26 10:17:13 +02:00
winbuild
.azure-pipelines.yml CI: don't run CI jobs if only another CI was changed 2023-04-24 20:46:09 -07:00
.cirrus.yml CI: skip some more builds when possible 2023-03-24 19:59:50 -07:00
.dcignore
.dir-locals.el
.git-blame-ignore-revs
.gitattributes
.gitignore
.mailmap rtsp: skip malformed RTSP interleaved frame data 2023-03-30 09:59:09 +02:00
acinclude.m4
appveyor.yml CI: don't run CI jobs if only another CI was changed 2023-04-24 20:46:09 -07:00
buildconf
buildconf.bat
CHANGES
CMakeLists.txt cmake: speed up and extend picky clang/gcc options 2023-04-16 22:28:25 +00:00
configure.ac configure: don't set HAVE_WRITABLE_ARGV on Windows 2023-04-06 23:52:26 +02:00
COPYING
curl-config.in
GIT-INFO
libcurl.pc.in
MacOSX-Framework
Makefile.am cmake: speed up and extend picky clang/gcc options 2023-04-16 22:28:25 +00:00
Makefile.dist
maketgz
mlc_config.json
README
README.md
RELEASE-NOTES RELEASE-NOTES: synced 2023-04-25 09:49:41 +02:00
SECURITY.md

curl logo

Curl is a command-line tool for transferring data specified with URL syntax. Find out how to use curl by reading the curl.1 man page or the MANUAL document. Find out how to install Curl by reading the INSTALL document.

libcurl is the library curl is using to do its job. It is readily available to be used by your software. Read the libcurl.3 man page to learn how.

You can find answers to the most frequent questions we get in the FAQ document.

Study the COPYING file for distribution terms.

Contact

If you have problems, questions, ideas or suggestions, please contact us by posting to a suitable mailing list.

All contributors to the project are listed in the THANKS document.

Commercial support

For commercial support, maybe private and dedicated help with your problems or applications using (lib)curl visit the support page.

Website

Visit the curl website for the latest news and downloads.

Git

To download the latest source from the Git server, do this:

git clone https://github.com/curl/curl.git

(you will get a directory named curl created, filled with the source code)

Security problems

Report suspected security problems via our HackerOne page and not in public.

Notice

Curl contains pieces of source code that is Copyright (c) 1998, 1999 Kungliga Tekniska Högskolan. This notice is included here to comply with the distribution terms.

Backers

Thank you to all our backers! 🙏 [Become a backer]

Sponsors

Support this project by becoming a sponsor.