curl/lib
Daniel Stenberg ea75ccc53b
schannel_verify: avoid out of blob access
The code would previously read one byte past the provided
CURLOPT_CAINFO_BLOB if the blob ends exactly with -----BEGIN
CERTIFICATE-----

Reported-by: Andrew Nesbit
Closes #21543
2026-05-10 23:21:08 +02:00
..
curlx
vauth lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
vquic lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
vssh lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
vtls schannel_verify: avoid out of blob access 2026-05-10 23:21:08 +02:00
.gitignore
altsvc.c
altsvc.h
amigaos.c
amigaos.h
arpa_telnet.h
asyn-ares.c resolve: pass bool for proxy resolves 2026-04-24 13:10:59 +02:00
asyn-base.c resolve: pass bool for proxy resolves 2026-04-24 13:10:59 +02:00
asyn-thrdd.c asyn-thrdd: fix result processing without wakeup socketpair 2026-05-01 11:30:51 +02:00
asyn.h resolve: pass bool for proxy resolves 2026-04-24 13:10:59 +02:00
bufq.c
bufq.h
bufref.c
bufref.h
cf-dns.c ftp: remove 2 Curl_resolv_blocking() calls 2026-05-07 14:02:13 +02:00
cf-dns.h ftp: remove 2 Curl_resolv_blocking() calls 2026-05-07 14:02:13 +02:00
cf-h1-proxy.c auth: cleanups 2026-05-07 14:03:00 +02:00
cf-h1-proxy.h lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
cf-h2-proxy.c auth: cleanups 2026-05-07 14:03:00 +02:00
cf-h2-proxy.h lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
cf-haproxy.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
cf-haproxy.h
cf-https-connect.c
cf-https-connect.h
cf-ip-happy.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
cf-ip-happy.h
cf-socket.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
cf-socket.h
cfilters.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
cfilters.h lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
CMakeLists.txt
config-mac.h
config-os400.h
config-riscos.h
config-win32.h
conncache.c
conncache.h
connect.c ftp: remove 2 Curl_resolv_blocking() calls 2026-05-07 14:02:13 +02:00
connect.h ftp: remove 2 Curl_resolv_blocking() calls 2026-05-07 14:02:13 +02:00
content_encoding.c
content_encoding.h
cookie.c cookie: simplify strstore(), remove outdated comment 2026-05-10 00:31:25 +02:00
cookie.h
cshutdn.c
cshutdn.h
curl_addrinfo.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
curl_addrinfo.h lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
curl_config-cmake.h.in
curl_ctype.h
curl_endian.c
curl_endian.h
curl_fnmatch.c
curl_fnmatch.h
curl_fopen.c
curl_fopen.h
curl_get_line.c
curl_get_line.h
curl_gethostname.c
curl_gethostname.h
curl_gssapi.c
curl_gssapi.h
curl_hmac.h
curl_ldap.h
curl_md4.h
curl_md5.h
curl_memrchr.c
curl_memrchr.h
curl_ntlm_core.c
curl_ntlm_core.h
curl_printf.h
curl_range.c
curl_range.h
curl_sasl.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
curl_sasl.h
curl_setup.h
curl_sha256.h
curl_sha512_256.c
curl_sha512_256.h
curl_share.c
curl_share.h
curl_sspi.c
curl_sspi.h
curl_threads.c
curl_threads.h
curl_trc.c
curl_trc.h
cw-out.c
cw-out.h
cw-pause.c
cw-pause.h
dict.c
dict.h
dllmain.c
dnscache.c
dnscache.h
doh.c resolve: pass bool for proxy resolves 2026-04-24 13:10:59 +02:00
doh.h
dynhds.c
dynhds.h
easy.c
easy_lock.h
easygetopt.c
easyif.h
easyoptions.c
easyoptions.h
escape.c
escape.h
fake_addrinfo.c
fake_addrinfo.h
file.c
file.h
fileinfo.c
fileinfo.h
formdata.c
formdata.h
ftp-int.h
ftp.c ftp: simplify ftp_done 2026-05-07 14:53:55 +02:00
ftp.h
ftplistparser.c
ftplistparser.h
functypes.h
getenv.c
getinfo.c
getinfo.h
gopher.c
gopher.h
hash.c
hash.h
headers.c
headers.h
hmac.c
hostip.c hostip: convert Curl_resolv_unix to static resolv_unix 2026-05-05 17:49:12 +02:00
hostip.h hostip: convert Curl_resolv_unix to static resolv_unix 2026-05-05 17:49:12 +02:00
hostip4.c
hostip6.c
hsts.c hsts: rename Curl_hsts() to hsts_check() and make it static 2026-05-05 17:46:51 +02:00
hsts.h hsts: rename Curl_hsts() to hsts_check() and make it static 2026-05-05 17:46:51 +02:00
http.c auth: cleanups 2026-05-07 14:03:00 +02:00
http.h auth: cleanups 2026-05-07 14:03:00 +02:00
http1.c
http1.h
http2.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
http2.h
http_aws_sigv4.c auth: cleanups 2026-05-07 14:03:00 +02:00
http_aws_sigv4.h
http_chunks.c
http_chunks.h
http_digest.c auth: cleanups 2026-05-07 14:03:00 +02:00
http_digest.h
http_negotiate.c auth: cleanups 2026-05-07 14:03:00 +02:00
http_negotiate.h
http_ntlm.c auth: cleanups 2026-05-07 14:03:00 +02:00
http_ntlm.h
http_proxy.c auth: cleanups 2026-05-07 14:03:00 +02:00
http_proxy.h lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
httpsrr.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
httpsrr.h tidy-up: whitespace 2026-04-27 13:34:27 +02:00
idn.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
idn.h lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
if2ip.c
if2ip.h
imap.c
imap.h
ldap.c ldap: fix minor leak on write callback error 2026-05-07 22:57:38 +02:00
libcurl.def
libcurl.rc
libcurl.vers.in
llist.c
llist.h
macos.c
macos.h
Makefile.am
Makefile.inc lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
Makefile.soname
md4.c
md5.c
memdebug.c
mime.c mime: simplify Curl_mime_prepare_headers 2026-05-04 11:20:22 +02:00
mime.h
mprintf.c
mqtt.c mqtt: validate PINGRESP and DISCONNECT have remaining_length == 0 2026-04-30 14:14:44 +02:00
mqtt.h
multi.c protocol: introduce typedef for the do_more() function 2026-05-06 08:16:33 +02:00
multi_ev.c
multi_ev.h
multi_ntfy.c
multi_ntfy.h
multihandle.h
multiif.h
netrc.c
netrc.h
noproxy.c
noproxy.h
openldap.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
optiontable.pl
parsedate.c
parsedate.h
peer.c peer: fix compare of hostname for uds 2026-05-06 10:14:17 +02:00
peer.h lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
pingpong.c
pingpong.h
pop3.c
pop3.h
progress.c
progress.h
protocol.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
protocol.h protocol: introduce typedef for the do_more() function 2026-05-06 08:16:33 +02:00
psl.c
psl.h
rand.c
rand.h
ratelimit.c
ratelimit.h
request.c auth: cleanups 2026-05-07 14:03:00 +02:00
request.h auth: cleanups 2026-05-07 14:03:00 +02:00
rtsp.c auth: cleanups 2026-05-07 14:03:00 +02:00
rtsp.h
select.c
select.h
sendf.c
sendf.h
setopt.c ECH: cleanups 2026-05-08 13:09:45 +02:00
setopt.h
setup-os400.h
setup-vms.h
setup-win32.h
sha256.c tidy-up: miscellaneous 2026-04-30 20:22:23 +02:00
sigpipe.h
slist.c
slist.h
smb.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
smb.h
smtp.c
smtp.h
sockaddr.h
socketpair.c
socketpair.h
socks.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
socks.h lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
socks_gssapi.c socks_gssapi: simplify Curl_SOCKS5_gssapi_negotiate 2026-05-05 16:24:40 +02:00
socks_sspi.c lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
splay.c
splay.h
strcase.c
strcase.h
strequal.c
strerror.c
strerror.h
system_win32.c
system_win32.h
telnet.c
telnet.h
tftp.c
tftp.h
thrdpool.c
thrdpool.h
thrdqueue.c thrdqueue: make thrdq_await_done only for unit tests 2026-05-05 08:55:49 +02:00
thrdqueue.h thrdqueue.h: minor language polish in comments 2026-05-05 14:34:27 +02:00
transfer.c
transfer.h
uint-bset.c
uint-bset.h
uint-hash.c
uint-hash.h
uint-spbset.c
uint-spbset.h
uint-table.c
uint-table.h
url.c url: fix connection reuse for starttls protocols 2026-05-07 14:37:25 +02:00
url.h lib: introduce Curl_peer 2026-05-05 16:22:11 +02:00
urlapi-int.h
urlapi.c
urldata.h ECH: cleanups 2026-05-08 13:09:45 +02:00
version.c
ws.c
ws.h