mirror of
https://github.com/moparisthebest/curl
synced 2024-08-13 17:03:50 -04:00
8e762199b0
Fix theoretical integer overflow in Curl_auth_create_plain_message. The security impact of the overflow was discussed on hackerone. We agreed this is more of a theoretical vulnerability, as the integer overflow would only be triggerable on systems using 32-bits size_t with over 4GB of available memory space for the process. Closes #5391 |
||
|---|---|---|
| .. | ||
| cleartext.c | ||
| cram.c | ||
| digest_sspi.c | ||
| digest.c | ||
| digest.h | ||
| krb5_gssapi.c | ||
| krb5_sspi.c | ||
| ntlm_sspi.c | ||
| ntlm.c | ||
| ntlm.h | ||
| oauth2.c | ||
| spnego_gssapi.c | ||
| spnego_sspi.c | ||
| vauth.c | ||
| vauth.h | ||