curl / Mailing Lists / curl-library / Single Mail

curl-library

Re: Fwd: Security fix: reset memory of Curl_easy->UserDefined->str

From: Prashant Chaudhari <prashantsc_at_gmail.com>
Date: Fri, 2 Mar 2018 16:00:03 -0800

 From: Daniel Stenberg <daniel_at_haxx.se
<daniel_at_haxx.se?Subject=Re:%20Fwd:%20Security%20fix:%20reset%20memory%20of%20Curl_easy-&gt;UserDefined-&gt;str>>

Date: Fri, 2 Mar 2018 17:45:30 +0100 (CET)

On Thu, 1 Mar 2018, Prashant Chaudhari wrote:

*> I would like to add attached patch, which zero out the user defined
data. I *
*> am particularly targeting to reset the password/authentication secrets. *
*> *
*> Please find attached patch on the libcurl version 7.57.0. and let me
know if *
*> you can accept it and release. *

Thanks, can you please make it a "unified" diff? Like when using -u with
the
diff tool? That makes it easier for us to receive and review it!

Please find attached unified diff file with the same fix.

Regards,
Prashant

-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html

Received on 2018-03-03