1
0
mirror of https://github.com/moparisthebest/curl synced 2024-12-24 09:08:49 -05:00
curl/src
Daniel Stenberg 52db54869e
curl: fix --local-port integer overflow
The tool's local port command line range parser didn't check for integer
overflows and could pass "weird" data to libcurl for this option.
libcurl however, has a strict range check for the values so it rejects
anything outside of the accepted range.

Reported-by: Brian Carpenter
Closes #3242
2018-11-07 11:48:17 +01:00
..
macos docs/comments: Update to secure URL versions 2017-08-08 21:41:07 +02:00
.gitignore VC: remove the makefile.vc6 build infra 2017-01-23 14:27:32 +01:00
CMakeLists.txt CMake: Improve config installation 2018-10-01 16:16:29 -04:00
curl.rc curl.rc: embed manifest for correct Windows version detection 2018-05-30 12:08:26 +00:00
Makefile.am Makefile: add 'tidy' target that runs clang-tidy 2018-10-27 15:59:38 +02:00
makefile.amiga whitespace fixes 2018-09-23 22:24:02 +00:00
makefile.dj whitespace fixes 2018-09-23 22:24:02 +00:00
Makefile.inc whitespace fixes 2018-09-23 22:24:02 +00:00
Makefile.m32 whitespace fixes 2018-09-23 22:24:02 +00:00
Makefile.netware axtls: removed 2018-11-01 10:29:53 +01:00
Makefile.Watcom s/cURL/curl 2016-11-07 10:36:23 +01:00
mkhelp.pl mkhelp.pl: support reproducible build 2017-10-30 19:27:49 +01:00
slist_wc.c URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
slist_wc.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_binmode.c whitespace fixes 2018-09-23 22:24:02 +00:00
tool_binmode.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_bname.c whitespace fixes 2018-09-23 22:24:02 +00:00
tool_bname.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_cb_dbg.c whitespace fixes 2018-09-23 22:24:02 +00:00
tool_cb_dbg.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_cb_hdr.c tool_cb_hdr: handle failure of rename() 2018-10-17 09:15:05 +02:00
tool_cb_hdr.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_cb_prg.c cppcheck: fix warnings 2018-06-11 11:14:48 +02:00
tool_cb_prg.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_cb_rea.c whitespace fixes 2018-09-23 22:24:02 +00:00
tool_cb_rea.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_cb_see.c whitespace fixes 2018-09-23 22:24:02 +00:00
tool_cb_see.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_cb_wrt.c curl: fixed UTF-8 in current console code page (Windows) 2018-11-05 09:58:29 +01:00
tool_cb_wrt.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_cfgable.c curl: --doh-url added 2018-09-06 09:17:25 +02:00
tool_cfgable.h curl: fix --local-port integer overflow 2018-11-07 11:48:17 +01:00
tool_convert.c whitespace fixes 2018-09-23 22:24:02 +00:00
tool_convert.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_dirhie.c whitespace fixes 2018-09-23 22:24:02 +00:00
tool_dirhie.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_doswin.c tool: add undocumented option --dump-module-paths for win32 2018-11-06 03:15:44 -05:00
tool_doswin.h tool: add undocumented option --dump-module-paths for win32 2018-11-06 03:15:44 -05:00
tool_easysrc.c code style: use spaces around equals signs 2017-09-11 09:29:50 +02:00
tool_easysrc.h mime: use in curl cli tool instead of form API. 2017-09-02 18:17:33 +01:00
tool_filetime.c time-cond: fix reading the file modification time on Windows 2018-02-05 22:02:10 +01:00
tool_filetime.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_formparse.c cppcheck: fix warnings 2018-06-11 11:14:48 +02:00
tool_formparse.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_getparam.c curl: fix --local-port integer overflow 2018-11-07 11:48:17 +01:00
tool_getparam.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_getpass.c Improve code readbility 2017-03-13 23:11:45 +01:00
tool_getpass.h checksrc: code style: use 'char *name' style 2016-11-24 23:58:22 +01:00
tool_help.c curl: update --tlsv* descriptions in --help output 2018-09-16 23:40:01 +02:00
tool_help.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_helpers.c curl: detect and bail out early on parameter integer overflows 2017-08-07 09:38:45 +02:00
tool_helpers.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_homedir.c tool: fix Windows Unicode build 2017-04-04 23:04:29 +02:00
tool_homedir.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
tool_hugehelp.c.cvs tests: checksrc compliance 2016-12-19 02:31:59 -05:00
tool_hugehelp.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
tool_libinfo.c whitespace fixes 2018-09-23 22:24:02 +00:00
tool_libinfo.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_main.c tool: add undocumented option --dump-module-paths for win32 2018-11-06 03:15:44 -05:00
tool_main.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_metalink.c GCC: silence -Wcast-function-type uniformly 2018-08-11 19:19:04 +02:00
tool_metalink.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
tool_msgs.c voutf: fix bad arethmetic when outputting warnings to stderr 2018-10-30 07:47:25 +01:00
tool_msgs.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_operate.c curl: fix --local-port integer overflow 2018-11-07 11:48:17 +01:00
tool_operate.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_operhlp.c strcasecompare: all case insensitive string compares ignore locale now 2016-10-31 08:46:35 +01:00
tool_operhlp.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_panykey.c whitespace fixes 2018-09-23 22:24:02 +00:00
tool_panykey.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_paramhlp.c cppcheck: fix warnings 2018-06-11 11:14:48 +02:00
tool_paramhlp.h curl: detect and bail out early on parameter integer overflows 2017-08-07 09:38:45 +02:00
tool_parsecfg.c whitespace fixes 2018-09-23 22:24:02 +00:00
tool_parsecfg.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_sdecls.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_setopt.c form/mime: field names are not allowed to contain zero-valued bytes. 2017-09-22 01:08:29 +01:00
tool_setopt.h mime: use in curl cli tool instead of form API. 2017-09-02 18:17:33 +01:00
tool_setup.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_sleep.c whitespace fixes 2018-09-23 22:24:02 +00:00
tool_sleep.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_strdup.c code style: use spaces around pluses 2017-09-11 09:29:50 +02:00
tool_strdup.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
tool_urlglob.c urlglob: improve error message 2018-09-13 08:04:49 +02:00
tool_urlglob.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_util.c Windows: fixes for MinGW targeting Windows Vista 2018-10-09 08:33:45 +02:00
tool_util.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_version.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
tool_vms.c whitespace fixes 2018-09-23 22:24:02 +00:00
tool_vms.h whitespace fixes 2018-09-23 22:24:02 +00:00
tool_writeout.c curl: correct the switch() logic in ourWriteOut 2018-11-07 11:15:20 +01:00
tool_writeout.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00
tool_xattr.c docs/comments: Update to secure URL versions 2017-08-08 21:41:07 +02:00
tool_xattr.h URLs: change all http:// URLs to https:// 2016-02-03 00:19:02 +01:00