romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-01 16:30:32 +03:00
Code Issues Projects Releases Packages Wiki Activity

tool_urlglob: fix memory-leak on glob range overflow

Browse source 
Follow-up to 5f273fdddf

Pointed out by Codex Security

Closes #20956
This commit is contained in:
Daniel Stenberg 2026-03-17 13:30:02 +01:00
parent 91b422d356
commit 1098e1044e
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/tool_urlglob.c
View file

@ -130,8 +130,10 @@ static CURLcode glob_set(struct URLGlob *glob, const char **patternp,
done = TRUE;
FALLTHROUGH();
case ',':
if(size >= 100000)
return globerror(glob, "range overflow", 0, CURLE_URL_MALFORMAT);
if(size >= 100000) {
result = globerror(glob, "range overflow", 0, CURLE_URL_MALFORMAT);
goto error;
}
if(!palloc) {
palloc = 5; /* a reasonable default */