romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-06-02 02:14:36 +03:00
Code Issues Projects Releases Packages Wiki Activity

tftp: avoid the timeout calc if the timeout is crazy

Browse source 
Avoids integer overflow when a silly value is set.

Fixes #21782
Reported-by: Mike-menny on github
Closes #21787
This commit is contained in:
Daniel Stenberg 2026-05-27 23:37:12 +02:00
parent d1b482caec
commit 6597e6d461
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/tftp.c
View file

@ -167,7 +167,8 @@ static CURLcode tftp_set_timeouts(struct tftp_conn *state)
}
/* Set per-block timeout to total */
if(timeout_ms > 0)
if((timeout_ms > 0) && (timeout_ms < 3600000))
/* do the calculation only if the timeout is "reasonable" */
timeout = (time_t)(timeout_ms + 500) / 1000;
else
timeout = 15;