mirror of
https://github.com/curl/curl.git
synced 2025-01-24 14:15:18 +08:00
8e762199b0
Fix theoretical integer overflow in Curl_auth_create_plain_message. The security impact of the overflow was discussed on hackerone. We agreed this is more of a theoretical vulnerability, as the integer overflow would only be triggerable on systems using 32-bits size_t with over 4GB of available memory space for the process. Closes #5391 |
||
---|---|---|
.. | ||
cleartext.c | ||
cram.c | ||
digest_sspi.c | ||
digest.c | ||
digest.h | ||
krb5_gssapi.c | ||
krb5_sspi.c | ||
ntlm_sspi.c | ||
ntlm.c | ||
ntlm.h | ||
oauth2.c | ||
spnego_gssapi.c | ||
spnego_sspi.c | ||
vauth.c | ||
vauth.h |