cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: [SECURITY ADVISORY 1/4] libcurl wrong re-use of connections

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Wed, 26 Mar 2014 14:39:21 +0100 (CET)

On Wed, 26 Mar 2014, Alessandro Ghedini wrote:

>> Tests 815 and 816 seem to be broken in the new release. git-bisect points
>> to the commit applying the above patch. A log capturing the failure is
>> attached.
>
> I'm seeing this too, except that most of the time 815/816 just freeze
> instead of failing.

Ah yes, both tests actually exploited the previous flaw in an unintented way
so we need to fix them... Unless someone beats me to it, I'll do it later.

--
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html
Received on 2014-03-26