]> git.ipfire.org Git - thirdparty/curl.git/commit
projects / thirdparty / curl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d2146c5) | patch
ntlm: avoid malloc(0) for zero length passwords
authorDaniel Stenberg <daniel@haxx.se>
Sat, 4 Nov 2017 15:42:21 +0000 (16:42 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Sat, 4 Nov 2017 21:22:49 +0000 (22:22 +0100)
commit685ef130575cdcf63fe9547757d88a49a40ef281
treed3c1f4f281c61a4ea7aaff2a05da6e1df71276c5tree | snapshot
parentd2146c598aa8f9746af55f133a6017b4fe541f7ccommit | diff
ntlm: avoid malloc(0) for zero length passwords

It triggers an assert() when built with memdebug since malloc(0) may
return NULL *or* a valid pointer.

Detected by OSS-Fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4054

Assisted-by: Max Dymond
Closes #2054
lib/curl_ntlm_core.c diff | blob | blame | history
Mirror of https://github.com/curl/curl.git