1
0
mirror of https://github.com/moparisthebest/curl synced 2025-03-01 01:41:50 -05:00
Even Rouault 55b51b8c49
Curl_dedotdotify(): always nul terminate returned string.
This fixes potential out-of-buffer access on "file:./" URL

$ valgrind curl "file:./"
==24516== Memcheck, a memory error detector
==24516== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.
==24516== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info
==24516== Command: /home/even/install-curl-git/bin/curl file:./
==24516==
==24516== Conditional jump or move depends on uninitialised value(s)
==24516==    at 0x4C31F9C: strcmp (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==24516==    by 0x4EBB315: seturl (urlapi.c:801)
==24516==    by 0x4EBB568: parseurl (urlapi.c:861)
==24516==    by 0x4EBC509: curl_url_set (urlapi.c:1199)
==24516==    by 0x4E644C6: parseurlandfillconn (url.c:2044)
==24516==    by 0x4E67AEF: create_conn (url.c:3613)
==24516==    by 0x4E68A4F: Curl_connect (url.c:4119)
==24516==    by 0x4E7F0A4: multi_runsingle (multi.c:1440)
==24516==    by 0x4E808E5: curl_multi_perform (multi.c:2173)
==24516==    by 0x4E7558C: easy_transfer (easy.c:686)
==24516==    by 0x4E75801: easy_perform (easy.c:779)
==24516==    by 0x4E75868: curl_easy_perform (easy.c:798)

Was originally spotted by
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10637
Credit to OSS-Fuzz

Closes #3039
2018-09-24 07:48:41 +02:00
..
2018-06-11 11:14:48 +02:00
2018-09-23 22:24:02 +00:00
2016-10-18 13:59:54 +02:00
2018-09-23 22:24:02 +00:00
2018-08-09 12:37:19 +02:00
2018-06-11 11:14:48 +02:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-01-05 23:34:30 -05:00
2018-06-21 09:44:04 +02:00
2018-06-03 12:14:45 +00:00
2018-09-23 22:24:02 +00:00
2017-03-26 23:56:23 +02:00
2017-07-28 16:41:29 +02:00
2018-06-11 11:14:48 +02:00
2018-09-23 22:24:02 +00:00
2018-09-13 08:26:37 +02:00
2018-09-12 08:52:40 +00:00
2018-09-23 22:24:02 +00:00
2018-09-22 11:58:10 +02:00
2018-09-07 09:26:08 +02:00
2018-09-06 09:17:25 +02:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-08 15:36:11 +02:00
2018-09-23 22:24:02 +00:00
2018-09-22 11:58:10 +02:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-22 11:58:10 +02:00
2018-06-11 11:14:48 +02:00
2017-04-22 11:25:27 +02:00
2018-09-06 09:17:17 +02:00
2018-09-23 22:24:02 +00:00
2018-06-27 13:49:18 +02:00
2018-09-23 22:24:02 +00:00
2018-09-06 09:17:17 +02:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2016-12-21 11:07:26 +01:00
2018-09-23 23:08:39 +02:00
2018-09-23 22:24:02 +00:00
2017-09-11 09:29:50 +02:00
2018-09-22 11:58:10 +02:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-22 11:58:10 +02:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-14 18:48:35 +00:00
2018-09-14 18:48:35 +00:00
2018-06-27 13:49:18 +02:00
2018-07-28 22:36:15 +02:00
2018-02-23 23:29:01 +00:00
2018-06-23 22:50:31 +02:00
2017-09-02 17:47:10 +01:00
2017-03-13 23:11:45 +01:00
2018-09-23 22:24:02 +00:00
2018-02-23 23:29:01 +00:00
2018-03-19 19:22:42 +01:00
2018-09-23 22:24:02 +00:00
2017-10-25 18:48:05 +02:00
2018-07-20 22:58:42 +02:00
2018-09-22 11:58:10 +02:00
2018-06-11 11:14:48 +02:00
2018-09-23 22:24:02 +00:00
2018-05-16 02:21:06 -04:00
2018-09-23 22:24:02 +00:00
2018-06-11 11:14:48 +02:00
2018-09-23 22:24:02 +00:00
2018-06-12 16:00:27 +02:00
2018-06-12 16:00:27 +02:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-22 11:58:10 +02:00
2018-07-30 17:59:36 +02:00
2018-09-22 11:58:10 +02:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-04 14:44:47 +00:00
2018-09-01 10:40:42 +02:00
2018-08-21 18:53:43 +02:00
2018-09-23 22:24:02 +00:00
2018-09-22 11:58:10 +02:00
2018-09-23 22:24:02 +00:00
2018-09-23 22:24:02 +00:00
2018-09-22 11:58:10 +02:00
2018-09-22 11:58:10 +02:00