romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-24 21:03:38 +03:00
Code Issues Projects Releases Packages Wiki Activity

Jean Jacques Drouin pointed out that you could only have a user name or

Browse source 
password of 127 bytes or less embedded in a URL, where actually the code
uses a 255 byte buffer for it! Modified now to use the full buffer size.
This commit is contained in:
Daniel Stenberg 2005-12-16 14:52:16 +00:00
parent fea5ddf585
commit 6dbfce1031
3 changed files with 15 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
lib/url.c
View file

@ -3166,12 +3166,13 @@ static CURLcode CreateConnection(struct SessionHandle *data,
if(*userpass != ':') {
/* the name is given, get user+password */
sscanf(userpass, "%127[^:@]:%127[^@]",
sscanf(userpass, "%" MAX_CURL_USER_LENGTH_TXT "[^:@]:"
"%" MAX_CURL_PASSWORD_LENGTH_TXT "[^@]",
user, passwd);
}
else
/* no name given, get the password only */
sscanf(userpass, ":%127[^@]", passwd);
sscanf(userpass, ":%" MAX_CURL_PASSWORD_LENGTH_TXT "[^@]", passwd);
if(user[0]) {
char *newname=curl_unescape(user, 0);