romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-26 08:13:32 +03:00
Code Issues Projects Releases Packages Wiki Activity

ftp: CURLOPT_FTP_SKIP_PASV_IP by default

Browse source 
The command line tool also independently sets --ftp-skip-pasv-ip by
default.

Ten test cases updated to adapt the modified --libcurl output.

Bug: https://curl.se/docs/CVE-2020-8284.html
CVE-2020-8284

Reported-by: Varnavas Papaioannou
This commit is contained in:
Daniel Stenberg 2020-11-24 14:56:57 +01:00
parent abd846c374
commit ec9cc725d5
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
14 changed files with 18 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
lib/url.c
View file

@ -497,6 +497,7 @@ CURLcode Curl_init_userdefined(struct Curl_easy *data)
set->ftp_use_eprt = TRUE; /* FTP defaults to EPRT operations */
set->ftp_use_pret = FALSE; /* mainly useful for drftpd servers */
set->ftp_filemethod = FTPFILE_MULTICWD;
set->ftp_skip_ip = TRUE; /* skip PASV IP by default */
#endif
set->dns_cache_timeout = 60; /* Timeout every 60 seconds by default */