moparisthebest/curl
1
0
Fork 0
mirror of https://github.com/moparisthebest/curl synced 2024-11-13 21:15:08 -05:00
Code Issues Releases Wiki Activity
304bb2f7c1
curl/tests/libtest
History
Even Rouault 55b51b8c49
Curl_dedotdotify(): always nul terminate returned string. 
This fixes potential out-of-buffer access on "file:./" URL

$ valgrind curl "file:./"
==24516== Memcheck, a memory error detector
==24516== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.
==24516== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info
==24516== Command: /home/even/install-curl-git/bin/curl file:./
==24516==
==24516== Conditional jump or move depends on uninitialised value(s)
==24516==    at 0x4C31F9C: strcmp (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==24516==    by 0x4EBB315: seturl (urlapi.c:801)
==24516==    by 0x4EBB568: parseurl (urlapi.c:861)
==24516==    by 0x4EBC509: curl_url_set (urlapi.c:1199)
==24516==    by 0x4E644C6: parseurlandfillconn (url.c:2044)
==24516==    by 0x4E67AEF: create_conn (url.c:3613)
==24516==    by 0x4E68A4F: Curl_connect (url.c:4119)
==24516==    by 0x4E7F0A4: multi_runsingle (multi.c:1440)
==24516==    by 0x4E808E5: curl_multi_perform (multi.c:2173)
==24516==    by 0x4E7558C: easy_transfer (easy.c:686)
==24516==    by 0x4E75801: easy_perform (easy.c:779)
==24516==    by 0x4E75868: curl_easy_perform (easy.c:798)

Was originally spotted by
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10637
Credit to OSS-Fuzz

Closes #3039
2018-09-24 07:48:41 +02:00
..
.gitignore libtest: Add chkdecimalpoint to .gitignore 2018-09-15 23:39:50 +02:00
chkdecimalpoint.c test1148: disable if decimal separator is not point 2018-08-21 19:00:48 +02:00
chkhostname.c tests/libtest: follow our code style guidelines better 2016-04-03 11:57:34 +02:00
CMakeLists.txt test1148: disable if decimal separator is not point 2018-08-21 19:00:48 +02:00
first.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
lib500.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib501.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib502.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib503.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib504.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib505.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib506.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib507.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
lib508.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib509.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib510.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib511.c checksrc: warn for assignments within if() expressions 2016-12-14 01:29:44 +01:00
lib512.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib513.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib514.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib515.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib516.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib517.c parsedate: support UT timezone 2018-03-19 19:22:42 +01:00
lib518.c build: remove HAVE_LIMITS_H check 2018-01-05 23:34:30 -05:00
lib519.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib520.c checksrc: warn for assignments within if() expressions 2016-12-14 01:29:44 +01:00
lib521.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib523.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib524.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib525.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
lib526.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
lib530.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
lib533.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
lib536.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
lib537.c build: remove HAVE_LIMITS_H check 2018-01-05 23:34:30 -05:00
lib539.c checksrc: warn for assignments within if() expressions 2016-12-14 01:29:44 +01:00
lib540.c build: remove HAVE_LIMITS_H check 2018-01-05 23:34:30 -05:00
lib541.c strerror: Preserve Windows error code in some functions 2017-07-11 01:53:23 -04:00
lib542.c checksrc: warn for assignments within if() expressions 2016-12-14 01:29:44 +01:00
lib543.c tests: Make sure libtests call curl_global_cleanup() 2017-08-19 21:42:47 +02:00
lib544.c checksrc: make sure sizeof() is used *with* parentheses 2018-05-21 23:21:47 +02:00
lib547.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib549.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib552.c checksrc: make sure sizeof() is used *with* parentheses 2018-05-21 23:21:47 +02:00
lib553.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib554.c mime: keep "text/plain" content type if user-specified. 2017-10-12 19:36:16 +01:00
lib555.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib556.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib557.c build: remove HAVE_LIMITS_H check 2018-01-05 23:34:30 -05:00
lib558.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib559.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib560.c spelling fixes 2018-02-23 23:29:01 +00:00
lib562.c checksrc: warn for assignments within if() expressions 2016-12-14 01:29:44 +01:00
lib564.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
lib566.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib567.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib568.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib569.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib570.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib571.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib572.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib573.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib574.c libtest/lib574.c: use correct callback proto 2017-05-31 11:56:53 +02:00
lib575.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
lib576.c code: style updates 2016-04-03 22:38:36 +02:00
lib578.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib579.c cppcheck: fix warnings 2018-06-11 11:14:48 +02:00
lib582.c lib582: do not verify host for SFTP 2017-12-01 17:40:14 +01:00
lib583.c lib583: fix compiler warning 2017-05-31 19:05:50 +02:00
lib586.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib589.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib590.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib591.c build: remove HAVE_LIMITS_H check 2018-01-05 23:34:30 -05:00
lib597.c build: remove HAVE_LIMITS_H check 2018-01-05 23:34:30 -05:00
lib598.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib599.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib643.c test643: verify curl_mime_subparts() rejects cyclic additions. 2017-10-08 19:05:59 +01:00
lib650.c curl-compilers: enable -Wbad-function-cast on GCC 2018-08-21 18:53:45 +02:00
lib651.c test651: curl_formadd with huge COPYCONTENTS 2017-10-13 07:55:47 +02:00
lib652.c checksrc: make sure sizeof() is used *with* parentheses 2018-05-21 23:21:47 +02:00
lib653.c test653: check reuse of easy handle after mime data change 2017-10-20 14:01:14 +01:00
lib654.c mime: clone mime tree upon easy handle duplication. 2018-01-14 19:43:12 +01:00
lib655.c build: get CFLAGS (including -werror) used for examples and tests 2018-03-04 19:46:26 +01:00
lib1156.c http resume: skip body if http code 416 (range error) is ignored. 2018-05-22 13:23:02 +02:00
lib1500.c checksrc: code style: use 'char *name' style 2016-11-24 23:58:22 +01:00
lib1501.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
lib1502.c lib1502: fix memory leak in torture test 2018-08-10 16:16:06 +02:00
lib1506.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
lib1507.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib1508.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
lib1509.c tests: Fix format specifiers 2018-05-14 09:42:27 +02:00
lib1510.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib1511.c checksrc: code style: use 'char *name' style 2016-11-24 23:58:22 +01:00
lib1512.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib1513.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib1514.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
lib1515.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
lib1517.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib1520.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib1522.c lib1522: fix curl_easy_setopt argument type 2018-08-24 21:06:26 +02:00
lib1525.c libtest: fix MinGW-w64 warnings 2017-05-08 19:59:46 +02:00
lib1526.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib1527.c libtest: fix MinGW-w64 warnings 2017-05-08 19:59:46 +02:00
lib1528.c checksrc: warn for assignments within if() expressions 2016-12-14 01:29:44 +01:00
lib1529.c checksrc: warn for assignments within if() expressions 2016-12-14 01:29:44 +01:00
lib1530.c checksrc: warn for assignments within if() expressions 2016-12-14 01:29:44 +01:00
lib1531.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib1532.c easy: Reset all statistical session info in curl_easy_reset 2016-09-20 01:14:01 -04:00
lib1533.c whitespace fixes 2018-09-23 22:24:02 +00:00
lib1534.c easy: Initialize info variables on easy init and duphandle 2016-11-05 23:06:28 -04:00
lib1535.c tests: Fix format specifiers 2018-05-14 09:42:27 +02:00
lib1536.c tests: Fix format specifiers 2018-05-14 09:42:27 +02:00
lib1537.c cppcheck: fix warnings 2018-06-11 11:14:48 +02:00
lib1538.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
lib1540.c test1540: Remove unused macro TEST_HANG_TIMEOUT 2018-08-09 12:37:21 +02:00
lib1550.c tests: Make sure libtests call curl_global_cleanup() 2017-08-19 21:42:47 +02:00
lib1551.c tests: Make sure libtests call curl_global_cleanup() 2017-08-19 21:42:47 +02:00
lib1552.c multi_cleanup: call DONE on handles that never got that 2017-10-06 16:48:39 +02:00
lib1553.c pingpong: return error when trying to send without connection 2017-10-07 00:20:31 +02:00
lib1554.c cppcheck: fix warnings 2018-06-11 11:14:48 +02:00
lib1555.c TODO fixed: Detect when called from within callbacks 2018-02-15 09:36:03 +01:00
lib1556.c test1556: verify >16KB headers to the header callback 2018-02-16 22:54:50 +01:00
lib1557.c multi: fix crash due to dangling entry in connect-pending list 2018-06-23 22:31:52 +02:00
lib1560.c Curl_dedotdotify(): always nul terminate returned string. 2018-09-24 07:48:41 +02:00
lib1900.c cppcheck: fix warnings 2018-06-11 11:14:48 +02:00
libauthretry.c whitespace fixes 2018-09-23 22:24:02 +00:00
libntlmconnect.c general: fix printf specifiers 2018-08-01 14:08:00 +02:00
Makefile.am whitespace fixes 2018-09-23 22:24:02 +00:00
Makefile.inc URL-API 2018-09-08 15:36:11 +02:00
mk-lib1521.pl spelling fixes 2018-02-23 23:29:01 +00:00
notexists.pl tests 1334 to 1363 revisited. 2012-06-05 20:20:40 +02:00
sethostname.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
sethostname.h whitespace fixes 2018-09-23 22:24:02 +00:00
stub_gssapi.c stub_gssapi: fix numerous 'unused parameter' warnings 2018-05-18 00:07:36 +02:00
stub_gssapi.h whitespace fixes 2018-09-23 22:24:02 +00:00
test75.pl replaced tabs with spaces 2010-02-16 13:32:45 +00:00
test307.pl replaced tabs with spaces 2010-02-16 13:32:45 +00:00
test610.pl replaced tabs with spaces 2010-02-16 13:32:45 +00:00
test613.pl tests: added --remote-time tests for remaining protocols that support it 2017-04-29 10:16:06 +02:00
test1013.pl test1013.pl: GSS-Negotiate doesn't exist as a feature anymore 2014-07-24 23:46:11 +02:00
test1022.pl Fixed test 1023 when using daily snapshots 2011-04-21 14:47:35 -07:00
test.h tests: fix -Wcast-qual warnings 2017-05-05 21:29:50 +02:00
testtrace.c whitespace fixes 2018-09-23 22:24:02 +00:00
testtrace.h whitespace fixes 2018-09-23 22:24:02 +00:00
testutil.c time: fix type conversions and compiler warnings 2017-05-24 22:56:22 +02:00
testutil.h whitespace fixes 2018-09-23 22:24:02 +00:00