mirror of
https://github.com/moparisthebest/curl
synced 2024-11-10 11:35:07 -05:00
36585b5395
libcurl truncates usernames and passwords it reads from .netrc to LOGINSIZE and PASSWORDSIZE (64) characters without any indication to the user, to ensure the values returned from Curl_parsenetrc fit in a caller-provided buffer. Fix the interface by passing back dynamically allocated buffers allocated to fit the user's input. The parser still relies on a 256-character buffer to read each line, though. So now you can include an ~246-character password in your .netrc, instead of the previous limit of 63 characters. Reported-by: Colby Ranger
37 lines
1.5 KiB
C
37 lines
1.5 KiB
C
#ifndef HEADER_CURL_NETRC_H
|
|
#define HEADER_CURL_NETRC_H
|
|
/***************************************************************************
|
|
* _ _ ____ _
|
|
* Project ___| | | | _ \| |
|
|
* / __| | | | |_) | |
|
|
* | (__| |_| | _ <| |___
|
|
* \___|\___/|_| \_\_____|
|
|
*
|
|
* Copyright (C) 1998 - 2011, Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
*
|
|
* This software is licensed as described in the file COPYING, which
|
|
* you should have received as part of this distribution. The terms
|
|
* are also available at http://curl.haxx.se/docs/copyright.html.
|
|
*
|
|
* You may opt to use, copy, modify, merge, publish, distribute and/or sell
|
|
* copies of the Software, and permit persons to whom the Software is
|
|
* furnished to do so, under the terms of the COPYING file.
|
|
*
|
|
* This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
|
|
* KIND, either express or implied.
|
|
*
|
|
***************************************************************************/
|
|
|
|
/* returns -1 on failure, 0 if the host is found, 1 is the host isn't found */
|
|
int Curl_parsenetrc(const char *host,
|
|
char **loginp,
|
|
char **passwordp,
|
|
char *filename);
|
|
/* Assume: (*passwordp)[0]=0, host[0] != 0.
|
|
* If (*loginp)[0] = 0, search for login and password within a machine
|
|
* section in the netrc.
|
|
* If (*loginp)[0] != 0, search for password within machine and login.
|
|
*/
|
|
|
|
#endif /* HEADER_CURL_NETRC_H */
|