[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[GNUnet-SVN] [gnurl] 199/219: tftp: use the current blksize for recvfrom
From: |
gnunet |
Subject: |
[GNUnet-SVN] [gnurl] 199/219: tftp: use the current blksize for recvfrom() |
Date: |
Wed, 22 May 2019 19:18:58 +0200 |
This is an automated email from the git hooks/post-receive script.
ng0 pushed a commit to branch master
in repository gnurl.
commit 2576003415625d7b5f0e390902f8097830b82275
Author: Daniel Stenberg <address@hidden>
AuthorDate: Fri May 3 22:20:37 2019 +0200
tftp: use the current blksize for recvfrom()
bug: https://curl.haxx.se/docs/CVE-2019-5436.html
Reported-by: l00p3r on hackerone
CVE-2019-5436
---
lib/tftp.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/lib/tftp.c b/lib/tftp.c
index 8b92b7bd6..289cda282 100644
--- a/lib/tftp.c
+++ b/lib/tftp.c
@@ -1009,7 +1009,7 @@ static CURLcode tftp_connect(struct connectdata *conn,
bool *done)
state->sockfd = state->conn->sock[FIRSTSOCKET];
state->state = TFTP_STATE_START;
state->error = TFTP_ERR_NONE;
- state->blksize = TFTP_BLKSIZE_DEFAULT;
+ state->blksize = blksize;
state->requested_blksize = blksize;
((struct sockaddr *)&state->local_addr)->sa_family =
--
To stop receiving notification emails like this one, please contact
address@hidden
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- [GNUnet-SVN] [gnurl] 199/219: tftp: use the current blksize for recvfrom(),
gnunet <=