We are seeing that curl_easy_recv in 7.32.0 is not honouring the buflen
limitation (i.e. *n > buflen).

Environment:
a) Custom built libcurl 7.32.0 (i.e. without IDN/IPv6). Output from
curl.exe:

curl 7.32.0 (x86_64-pc-win32) libcurl/7.32.0 WinSSL
Protocols: dict file ftp ftps gopher http https imap imaps ldap pop3 pop3s
rtsp
smtp smtps telnet tftp
Features: AsynchDNS GSS-Negotiate Largefile NTLM SSL SSPI

b) We use libcurl for custom protocol over SSL

c) Planning on upgrading from older curl to get SCHANNEL support in 7.32.0
From debugger:

CURLcode res = curl_easy_recv(curl, in, len, outlen);

Before call:
in->uninitialized
len->4
*outlen-> 0

After call:
in->"." (2e 00 00 00)
len->4
*outlen->37
res->CURLE_OK
schannel_recv is invoked
 nread = conn->recv[num](conn, num, buffertofill, bytesfromsocket,
&curlcode); (sendf.c: line#: 567)
  ret = Curl_read(c, sfd, buffer, buflen, &n1); (easy.c: line#: 909)
   CURLcode res = curl_easy_recv(curl, in, len, outlen); (test.c: our code)

Regards,
- Marc

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2013-08-24