curl-users
SSL bug buffer is too small !!!!!
From: 정중 이 <perllee_at_yahoo.co.kr>
Date: Sat, 1 Jan 2011 13:59:58 +0900 (KST)
Date: Sat, 1 Jan 2011 13:59:58 +0900 (KST)
ssluse.c
static void pubkey_show(struct SessionHandle *data,
int num,
const char *type,
const char *name,
unsigned char *raw,
int len)
{
char buffer[1024]; < -- too small
..
..
}
if len value(raw size) is over 340 , occur segment violation ...
thereforebuffer is 2048. !!!
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2011-01-01