mirror of
https://github.com/curl/curl.git
synced 2025-02-23 15:10:03 +08:00
- Add additional checking for missing and too-short SOCKS5 handshake messages. Prior to this change the SOCKS5 test server did not check that all parts of the handshake were received successfully. If those parts were missing or too short then the server would access uninitialized memory. This issue was discovered in CI job 'memory-sanitizer' test results. Test 2055 was failing due to the SOCKS5 test server not running. It was not running because either it crashed or memory sanitizer aborted it during Test 728. Test 728 connects to the SOCKS5 test server on a redirect but does not send any data on purpose. The test server was not prepared for that. Reported-by: Dan Fandrich Fixes https://github.com/curl/curl/issues/12117 Closes https://github.com/curl/curl/pull/12118 |
||
---|---|---|
.. | ||
.gitignore | ||
base64.pl | ||
CMakeLists.txt | ||
disabled.c | ||
fake_ntlm.c | ||
getpart.c | ||
getpart.h | ||
Makefile.am | ||
Makefile.inc | ||
mqttd.c | ||
resolve.c | ||
rtspd.c | ||
server_setup.h | ||
server_sockaddr.h | ||
sockfilt.c | ||
socksd.c | ||
sws.c | ||
testpart.c | ||
tftp.h | ||
tftpd.c | ||
util.c | ||
util.h |