moparisthebest/curl
1
0
Fork 0
mirror of https://github.com/moparisthebest/curl synced 2024-11-05 09:05:04 -05:00
Code Issues Releases Wiki Activity
23,308 Commits 10 Branches 144 Tags 113 MiB
1550e844b1
Commit Graph

1 Commits

Author SHA1 Message Date
Daniel Stenberg
5ff2c5ff25
FTP: zero terminate the entry path even on bad input 
... a single double quote could leave the entry path buffer without a zero
terminating byte. CVE-2017-1000254

Test 1152 added to verify.

Reported-by: Max Dymond
Bug: https://curl.haxx.se/docs/adv_20171004.html
 2017-10-02 07:50:17 +02:00