1
0
mirror of https://github.com/moparisthebest/curl synced 2025-02-28 09:21:50 -05:00
Tobias Stoeckmann 94b03664de mprintf: Fix dollar string handling
Verify that specified parameters are in range. If parameters are too
large, fail early on and avoid out of boundary accesses.

Also do not read behind boundaries of illegal format strings.

These are defensive measures since it is expected that format strings
are well-formed. Format strings should not be modifiable by user
input due to possible generic format string attacks.

Closes https://github.com/curl/curl/pull/5722
2020-07-27 03:42:59 -04:00
..
2020-06-19 23:29:26 +02:00
2019-03-15 10:22:42 +01:00
2019-03-15 10:22:42 +01:00
2020-05-14 18:13:27 +02:00
2020-05-14 18:13:27 +02:00
2020-05-14 18:13:27 +02:00
2019-11-08 14:51:42 +01:00
2020-07-21 20:00:29 +02:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2020-04-25 11:15:49 +02:00
2020-07-14 17:53:45 +02:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2018-06-11 11:14:48 +02:00
2019-11-08 14:51:42 +01:00
2020-07-14 17:53:45 +02:00
2020-05-14 18:13:27 +02:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2018-12-10 00:10:04 +01:00
2020-03-31 09:44:23 +02:00
2020-07-27 03:42:59 -04:00
2020-07-14 00:12:08 +02:00
2019-05-17 23:24:34 +02:00
2017-09-02 17:47:10 +01:00
2019-11-08 14:51:42 +01:00
2018-09-23 22:24:02 +00:00
2020-02-18 07:49:15 +01:00
2020-02-18 07:49:15 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2020-04-26 23:59:22 +02:00
2020-05-25 19:44:04 +00:00
2020-05-25 19:44:04 +00:00
2020-07-12 22:52:19 +02:00
2020-07-18 12:37:25 +02:00
2019-11-08 14:51:42 +01:00
2020-02-19 08:04:35 +01:00
2019-07-11 02:27:04 -04:00
2019-11-08 14:51:42 +01:00
2019-11-08 14:51:42 +01:00
2020-02-19 08:04:35 +01:00
2020-07-02 13:31:22 +02:00
2020-07-14 17:53:45 +02:00
2020-07-14 08:30:17 +00:00