cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: [SECURITY ADVISORY 1/4] libcurl wrong re-use of connections

From: Alessandro Ghedini <alessandro_at_ghedini.me>
Date: Thu, 27 Mar 2014 10:50:30 +0100

On Wed, Mar 26, 2014 at 10:11:16PM +0100, Dan Fandrich wrote:
> On Wed, Mar 26, 2014 at 02:39:21PM +0100, Daniel Stenberg wrote:
> > On Wed, 26 Mar 2014, Alessandro Ghedini wrote:
> >
> > >>Tests 815 and 816 seem to be broken in the new release.
> > >>git-bisect points to the commit applying the above patch. A log
> > >>capturing the failure is attached.
> > >
> > >I'm seeing this too, except that most of the time 815/816 just
> > >freeze instead of failing.
> >
> > Ah yes, both tests actually exploited the previous flaw in an
> > unintented way so we need to fix them... Unless someone beats me to
> > it, I'll do it later.
>
> I've committed a fix for these two tests.

Works for me too, thanks.

-- 
perl -E '$_=q;$/= @{[@_]};and s;\S+;<inidehG ordnasselA>;eg;say~~reverse'

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html

Received on 2014-03-27