From: Jay Satiro <raysatiro@yahoo.com>
Date: Thu, 30 Apr 2015 05:43:45 +0000 (-0400)
Subject: schannel: Fix out of bounds array
X-Git-Tag: curl-7_43_0~197
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=926cb9f;p=thirdparty%2Fcurl.git

schannel: Fix out of bounds array

Bug born in changes made several days ago 9a91e80.

Bug: http://curl.haxx.se/mail/lib-2015-04/0199.html
Reported-by: Brian Chrisman
---

diff --git a/lib/vtls/schannel.c b/lib/vtls/schannel.c
index 74c32dfed2..a42c88da6d 100644
--- a/lib/vtls/schannel.c
+++ b/lib/vtls/schannel.c
@@ -283,7 +283,7 @@ schannel_connect_step2(struct connectdata *conn, int sockindex)
   struct ssl_connect_data *connssl = &conn->ssl[sockindex];
   unsigned char *reallocated_buffer;
   size_t reallocated_length;
-  SecBuffer outbuf[2];
+  SecBuffer outbuf[3];
   SecBufferDesc outbuf_desc;
   SecBuffer inbuf[2];
   SecBufferDesc inbuf_desc;