Even Rouault
55b51b8c49
Curl_dedotdotify(): always nul terminate returned string.
...
This fixes potential out-of-buffer access on "file:./" URL
$ valgrind curl "file:./"
==24516== Memcheck, a memory error detector
==24516== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.
==24516== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info
==24516== Command: /home/even/install-curl-git/bin/curl file:./
==24516==
==24516== Conditional jump or move depends on uninitialised value(s)
==24516== at 0x4C31F9C: strcmp (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==24516== by 0x4EBB315: seturl (urlapi.c:801)
==24516== by 0x4EBB568: parseurl (urlapi.c:861)
==24516== by 0x4EBC509: curl_url_set (urlapi.c:1199)
==24516== by 0x4E644C6: parseurlandfillconn (url.c:2044)
==24516== by 0x4E67AEF: create_conn (url.c:3613)
==24516== by 0x4E68A4F: Curl_connect (url.c:4119)
==24516== by 0x4E7F0A4: multi_runsingle (multi.c:1440)
==24516== by 0x4E808E5: curl_multi_perform (multi.c:2173)
==24516== by 0x4E7558C: easy_transfer (easy.c:686)
==24516== by 0x4E75801: easy_perform (easy.c:779)
==24516== by 0x4E75868: curl_easy_perform (easy.c:798)
Was originally spotted by
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10637
Credit to OSS-Fuzz
Closes #3039
2018-09-24 07:48:41 +02:00
..
2018-06-11 11:14:48 +02:00
2018-09-23 22:24:02 +00:00
2017-04-17 08:32:13 +02:00
2017-01-23 14:27:32 +01:00
2016-10-18 13:59:54 +02:00
2018-09-23 22:24:02 +00:00
2016-02-03 00:19:02 +01:00
2018-07-11 23:41:24 +02:00
2018-08-09 12:37:19 +02:00
2016-06-22 10:28:41 +02:00
2018-06-11 11:14:48 +02:00
2018-05-21 23:21:47 +02:00
2018-09-23 22:24:02 +00:00
2016-12-18 23:46:17 +01:00
2018-09-23 22:24:02 +00:00
2016-02-03 00:19:02 +01:00
2017-10-19 18:48:21 +01:00
2016-02-03 00:19:02 +01:00
2018-01-05 23:34:30 -05:00
2018-01-05 23:34:30 -05:00
2018-01-05 23:34:30 -05:00
2018-02-07 21:33:57 +00:00
2018-01-05 23:34:30 -05:00
2018-07-22 21:17:27 +02:00
2018-06-25 16:36:10 +02:00
2018-06-21 09:44:04 +02:00
2018-02-20 17:51:43 -05:00
2018-07-12 22:46:15 +02:00
2017-11-05 15:09:48 +01:00
2018-09-10 08:33:08 +02:00
2018-08-31 14:11:37 +02:00
2018-06-01 14:40:35 +02:00
2017-01-13 16:25:20 +01:00
2016-06-22 10:28:41 +02:00
2018-06-21 09:48:26 +02:00
2018-05-03 15:19:20 +02:00
2018-05-03 15:19:20 +02:00
2017-02-06 19:21:05 +00:00
2016-02-09 08:46:36 +01:00
2017-06-02 13:30:41 +02:00
2017-06-02 13:30:41 +02:00
2018-06-03 12:14:45 +00:00
2016-02-03 00:19:02 +01:00
2016-11-24 23:58:22 +01:00
2016-02-03 00:19:02 +01:00
2018-02-13 22:55:29 +01:00
2016-06-22 10:28:41 +02:00
2016-11-24 23:58:22 +01:00
2018-09-23 22:24:02 +00:00
2017-04-21 22:42:14 +02:00
2016-02-03 00:19:02 +01:00
2017-03-26 23:56:23 +02:00
2018-04-24 08:03:23 +02:00
2016-02-03 00:19:02 +01:00
2016-05-20 16:50:04 +02:00
2016-02-03 00:19:02 +01:00
2018-09-03 07:42:37 +02:00
2017-09-23 13:58:14 -04:00
2018-09-13 10:06:05 +02:00
2016-02-03 00:19:02 +01:00
2018-09-22 11:58:10 +02:00
2018-03-20 15:00:09 +01:00
2016-02-03 00:19:02 +01:00
2018-03-11 20:33:04 +01:00
2018-01-30 17:23:26 +01:00
2017-07-28 16:41:29 +02:00
2016-02-03 00:19:02 +01:00
2018-06-11 11:14:48 +02:00
2016-06-22 10:28:41 +02:00
2016-12-13 23:39:11 +01:00
2018-09-23 22:24:02 +00:00
2018-09-13 08:26:37 +02:00
2017-10-28 16:32:43 +02:00
2018-09-12 08:52:40 +00:00
2016-02-03 00:19:02 +01:00
2018-08-24 19:20:16 +02:00
2016-12-13 23:39:11 +01:00
2018-09-23 22:24:02 +00:00
2018-09-22 11:58:10 +02:00
2016-02-03 00:19:02 +01:00
2018-09-07 09:26:08 +02:00
2018-09-06 09:17:25 +02:00
2018-09-24 07:48:41 +02:00
2016-02-03 00:19:02 +01:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-08 15:36:11 +02:00
2018-09-23 22:24:02 +00:00
2018-09-22 11:58:10 +02:00
2018-09-23 22:24:02 +00:00
2018-04-24 14:23:20 +02:00
2018-04-24 14:23:20 +02:00
2018-09-23 22:24:02 +00:00
2018-08-21 18:53:45 +02:00
2017-09-05 17:33:16 +01:00
2018-09-23 23:08:36 +02:00
2018-09-22 11:58:10 +02:00
2018-04-24 14:23:20 +02:00
2016-02-03 00:19:02 +01:00
2016-08-21 13:56:22 +02:00
2018-05-17 13:41:04 +02:00
2016-06-22 10:28:41 +02:00
2018-09-22 11:58:10 +02:00
2016-02-03 00:19:02 +01:00
2018-06-11 11:14:48 +02:00
2017-04-22 11:25:27 +02:00
2018-05-21 23:21:47 +02:00
2018-09-06 09:17:17 +02:00
2018-04-18 03:59:47 -04:00
2018-09-23 22:24:02 +00:00
2017-10-27 13:20:13 +02:00
2018-06-27 13:49:18 +02:00
2018-09-23 22:24:02 +00:00
2018-09-06 09:17:17 +02:00
2017-10-27 13:20:13 +02:00
2018-09-16 23:22:37 +02:00
2018-09-23 22:24:02 +00:00
2018-04-24 14:36:06 +02:00
2018-09-23 22:24:02 +00:00
2016-12-21 11:07:26 +01:00
2016-06-22 10:28:41 +02:00
2018-03-16 11:08:31 +01:00
2016-06-22 10:28:41 +02:00
2018-08-21 18:53:45 +02:00
2016-03-27 17:58:50 +01:00
2018-09-16 23:22:37 +02:00
2017-06-18 15:18:15 +02:00
2018-09-23 23:08:39 +02:00
2018-09-23 22:24:02 +00:00
2016-03-11 07:24:39 +00:00
2017-09-11 09:29:50 +02:00
2017-08-13 17:52:15 +02:00
2018-09-22 11:58:10 +02:00
2018-09-06 10:57:48 +02:00
2018-05-21 23:21:47 +02:00
2018-09-23 22:24:02 +00:00
2017-07-10 02:09:27 -04:00
2018-09-23 22:24:02 +00:00
2018-09-13 10:48:21 +02:00
2018-09-22 11:58:10 +02:00
2013-02-17 14:30:38 -07:00
2017-01-19 11:35:48 +00:00
2013-03-08 13:27:45 +01:00
2017-11-21 09:02:40 +01:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-13 08:26:23 +02:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2014-12-05 14:54:25 +01:00
2018-09-23 22:24:02 +00:00
2018-09-14 18:48:35 +00:00
2018-09-14 18:48:35 +00:00
2017-10-30 21:27:59 +01:00
2018-06-27 13:49:18 +02:00
2018-07-28 22:36:15 +02:00
2018-02-05 13:50:30 +01:00
2018-06-14 00:02:20 +02:00
2018-02-23 23:29:01 +00:00
2017-09-12 13:54:54 +02:00
2018-09-22 11:58:10 +02:00
2018-05-28 20:37:14 +02:00
2018-03-16 23:45:59 +01:00
2018-06-23 22:50:31 +02:00
2016-02-03 00:19:02 +01:00
2018-02-15 15:52:41 -05:00
2017-09-02 17:47:10 +01:00
2017-03-13 23:11:45 +01:00
2018-09-23 22:24:02 +00:00
2018-04-15 03:00:37 -04:00
2016-12-13 23:39:11 +01:00
2016-02-03 00:19:02 +01:00
2016-02-03 00:19:02 +01:00
2018-02-23 23:29:01 +00:00
2018-03-23 23:58:25 +01:00
2018-03-19 19:22:42 +01:00
2018-09-23 22:24:02 +00:00
2018-06-12 16:00:27 +02:00
2017-10-25 18:48:05 +02:00
2018-07-20 22:58:42 +02:00
2017-04-04 15:27:45 +02:00
2018-09-22 11:58:10 +02:00
2016-06-22 10:28:41 +02:00
2018-06-11 11:14:48 +02:00
2018-09-23 22:24:02 +00:00
2018-05-28 20:37:14 +02:00
2018-05-28 20:37:14 +02:00
2018-05-16 02:21:06 -04:00
2017-05-08 23:24:29 +02:00
2018-09-16 23:22:37 +02:00
2018-09-23 22:24:02 +00:00
2018-09-17 09:28:10 +02:00
2018-06-11 11:14:48 +02:00
2018-09-23 22:24:02 +00:00
2018-06-12 16:00:27 +02:00
2018-06-12 16:00:27 +02:00
2018-09-07 13:43:26 +02:00
2018-01-13 01:28:19 +01:00
2016-11-24 23:58:22 +01:00
2016-11-24 23:58:22 +01:00
2018-08-13 23:16:01 +02:00
2018-05-28 20:37:14 +02:00
2018-05-28 20:37:14 +02:00
2016-06-22 10:28:41 +02:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-22 11:58:10 +02:00
2018-07-30 17:59:36 +02:00
2018-09-22 11:58:10 +02:00
2016-06-22 10:28:41 +02:00
2018-09-23 22:24:02 +00:00
2017-09-11 09:29:50 +02:00
2017-09-11 09:29:50 +02:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2017-10-25 09:54:37 +02:00
2017-07-28 15:51:25 +02:00
2018-09-23 22:24:02 +00:00
2017-09-12 13:54:54 +02:00
2018-09-04 14:44:47 +00:00
2018-09-04 11:00:17 +02:00
2018-09-01 10:40:42 +02:00
2017-08-31 11:37:36 +02:00
2018-08-21 18:53:43 +02:00
2018-09-21 14:24:55 +02:00
2016-11-11 10:03:48 +01:00
2018-09-06 08:27:15 +02:00
2016-10-31 08:46:35 +01:00
2016-02-03 00:19:02 +01:00
2016-02-03 00:19:02 +01:00
2018-04-09 15:54:52 +02:00
2018-01-08 23:45:09 +13:00
2018-08-11 19:19:03 +02:00
2016-06-04 21:24:09 +01:00
2018-08-21 18:53:45 +02:00
2018-09-23 22:24:02 +00:00
2018-09-22 11:58:10 +02:00
2018-09-23 22:24:02 +00:00
2018-04-07 11:18:58 +02:00
2017-10-26 20:22:55 +02:00
2018-09-22 11:58:10 +02:00
2018-09-23 22:24:02 +00:00
2018-09-22 11:58:10 +02:00
2018-09-22 11:58:10 +02:00
2018-09-21 11:19:14 +02:00
2018-09-21 11:19:14 +02:00
2018-09-22 11:58:10 +02:00
2018-05-21 23:21:47 +02:00
2017-08-17 10:27:00 +02:00
2018-08-11 19:19:03 +02:00
2018-04-24 14:23:20 +02:00
2018-04-23 22:52:48 +02:00
2018-09-06 08:27:15 +02:00
2016-11-24 23:58:22 +01:00