curl / Mailing Lists / curl-library / Single Mail


Re: Fwd: Security fix: reset memory of Curl_easy->UserDefined->str

From: Daniel Stenberg <>
Date: Fri, 2 Mar 2018 17:45:30 +0100 (CET)

On Thu, 1 Mar 2018, Prashant Chaudhari wrote:

> I would like to add attached patch, which zero out the user defined data. I
> am particularly targeting to reset the password/authentication secrets.
> Please find attached patch on the libcurl version 7.57.0. and let me know if
> you can accept it and release.

Thanks, can you please make it a "unified" diff? Like when using -u with the
diff tool? That makes it easier for us to receive and review it!

Received on 2018-03-02