13 Commits

Author	SHA1	Message	Date
Even Rouault	55b51b8c49	Curl_dedotdotify(): always nul terminate returned string. ... This fixes potential out-of-buffer access on "file:./" URL $ valgrind curl "file:./" ==24516== Memcheck, a memory error detector ==24516== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al. ==24516== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info ==24516== Command: /home/even/install-curl-git/bin/curl file:./ ==24516== ==24516== Conditional jump or move depends on uninitialised value(s) ==24516== at 0x4C31F9C: strcmp (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==24516== by 0x4EBB315: seturl (urlapi.c:801) ==24516== by 0x4EBB568: parseurl (urlapi.c:861) ==24516== by 0x4EBC509: curl_url_set (urlapi.c:1199) ==24516== by 0x4E644C6: parseurlandfillconn (url.c:2044) ==24516== by 0x4E67AEF: create_conn (url.c:3613) ==24516== by 0x4E68A4F: Curl_connect (url.c:4119) ==24516== by 0x4E7F0A4: multi_runsingle (multi.c:1440) ==24516== by 0x4E808E5: curl_multi_perform (multi.c:2173) ==24516== by 0x4E7558C: easy_transfer (easy.c:686) ==24516== by 0x4E75801: easy_perform (easy.c:779) ==24516== by 0x4E75868: curl_easy_perform (easy.c:798) Was originally spotted by https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10637 Credit to OSS-Fuzz Closes #3039	2018-09-24 07:48:41 +02:00
Daniel Stenberg	e5743f08e7	code style: use spaces around pluses	2017-09-11 09:29:50 +02:00
Daniel Stenberg	6b84438d9a	code style: use spaces around equals signs	2017-09-11 09:29:50 +02:00
Daniel Stenberg	cfd3e8f399	dedotdot: fixed output for ".." and "." only input ... Found when updating test 1395, which I did to increase test coverage of this source file... Closes #1535	2017-06-03 00:11:51 +02:00
Steve Holme	0c331b8999	memdebug: Ensure curl/curl.h is included before curl_memory.h ... Follow up to commit 7db9782dd6.	2016-04-01 13:21:12 +01:00
Viktor Szakats	d49881cb19	URLs: change more http to https	2016-02-04 18:46:54 -05:00
Daniel Stenberg	4af40b3646	URLs: change all http:// URLs to https://	2016-02-03 00:19:02 +01:00
Daniel Stenberg	41ae9f717a	dotdot: allow an empty input string too ... It isn't used by the code in current conditions but for safety it seems sensible to at least not crash on such input. Extended unit test 1395 to verify this too as well as a plain "/" input.	2016-02-02 22:43:54 +01:00
Steve Holme	78ca3c6830	copyright: Updated following recent edits	2014-04-28 23:20:52 +01:00
Dan Fandrich	ef1322df67	Added a few more const where possible	2014-04-29 00:05:19 +02:00
Fabian Keil	48fe9226a0	dotdot.c: Fix a RFC section number in a comment for Curl_dedotdotify()	2013-07-23 20:50:59 +02:00
Yang Tse	5c6f12b9f2	dotdot.c: fix global declaration shadowing	2013-07-11 13:31:07 +02:00
Daniel Stenberg	7877619f85	dotdot: introducing dot file path cleanup ... RFC3986 details how a path part passed in as part of a URI should be "cleaned" from dot sequences before getting used. The described algorithm is now implemented in lib/dotdot.c with the accompanied test case in test 1395. Bug: http://curl.haxx.se/bug/view.cgi?id=1200 Reported-by: Alex Vinnik	2013-06-22 14:15:07 +02:00