diff options
| author | dartraiden <wowemuh@gmail.com> | 2018-09-07 00:27:45 +0300 |
|---|---|---|
| committer | dartraiden <wowemuh@gmail.com> | 2018-09-07 00:29:12 +0300 |
| commit | dc059a02a3d8d1f3f509ba31b7618cee001cba93 (patch) | |
| tree | a61572eda5489fcac8a2bbe896a788b297b8257a /libs/libcurl/src/curl_ntlm_core.c | |
| parent | a0fa47ed9d7be66a62f1cd05bc9577588c04a4fe (diff) | |
libcurl: update to 7.61.1
Diffstat (limited to 'libs/libcurl/src/curl_ntlm_core.c')
| -rw-r--r-- | libs/libcurl/src/curl_ntlm_core.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/libs/libcurl/src/curl_ntlm_core.c b/libs/libcurl/src/curl_ntlm_core.c index e27cab353c..922e85a926 100644 --- a/libs/libcurl/src/curl_ntlm_core.c +++ b/libs/libcurl/src/curl_ntlm_core.c @@ -557,8 +557,11 @@ CURLcode Curl_ntlm_core_mk_nt_hash(struct Curl_easy *data, unsigned char *ntbuffer /* 21 bytes */) { size_t len = strlen(password); - unsigned char *pw = len ? malloc(len * 2) : strdup(""); + unsigned char *pw; CURLcode result; + if(len > SIZE_T_MAX/2) /* avoid integer overflow */ + return CURLE_OUT_OF_MEMORY; + pw = len ? malloc(len * 2) : strdup(""); if(!pw) return CURLE_OUT_OF_MEMORY; |