curl / Mailing Lists / curl-library / Single Mail


Re: Fwd: Security fix: reset memory of Curl_easy->UserDefined->str

From: Prashant Chaudhari <>
Date: Fri, 2 Mar 2018 16:00:03 -0800

 From: Daniel Stenberg <

Date: Fri, 2 Mar 2018 17:45:30 +0100 (CET)

On Thu, 1 Mar 2018, Prashant Chaudhari wrote:

*> I would like to add attached patch, which zero out the user defined
data. I *
*> am particularly targeting to reset the password/authentication secrets. *
*> *
*> Please find attached patch on the libcurl version 7.57.0. and let me
know if *
*> you can accept it and release. *

Thanks, can you please make it a "unified" diff? Like when using -u with
diff tool? That makes it easier for us to receive and review it!

Please find attached unified diff file with the same fix.



Received on 2018-03-03