Commitf3a24d7

committed

Curl_auth_create_plain_message: fix too-large-input-check

1 parent81d135d commitf3a24d7Copy full SHA for f3a24d7

File tree

-1

lines changed

-1

lines changed

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -74,7 +74,7 @@ CURLcode Curl_auth_create_plain_message(struct Curl_easy *data,`
`74`	`74`	`plen=strlen(passwdp);`
`75`	`75`
`76`	`76`	`/* Compute binary message length. Check for overflows. */`
`77`		`-if((ulen>SIZE_T_MAX/2)\|\| (plen> (SIZE_T_MAX/2-2)))`
	`77`	`+if((ulen>SIZE_T_MAX/4)\|\| (plen> (SIZE_T_MAX/2-2)))`
`78`	`78`	`returnCURLE_OUT_OF_MEMORY;`
`79`	`79`	`plainlen=2*ulen+plen+2;`
`80`	`80`

Comments

(0)