2 Commits

Author	SHA1	Message	Date
Daniel Stenberg	e2b4df7b5e	tests: use %TESTNUMBER instead of fixed number ... This makes the tests easier to copy and relocate to other test numbers without having to update content. Closes #6738	2021-03-19 15:57:21 +01:00
Daniel Stenberg	535432c0ad	FTP: reject path components with control codes ... Refuse to operate when given path components featuring byte values lower than 32. Previously, inserting a %00 sequence early in the directory part when using the 'singlecwd' ftp method could make curl write a zero byte outside of the allocated buffer. Test case 340 verifies. CVE-2018-1000120 Reported-by: Duy Phan Thanh Bug: https://curl.haxx.se/docs/adv_2018-9cd6.html	2018-03-12 07:47:07 +01:00