cURL cURL > Mailing List > Monthly Index > Single Mail

curl-tracker Archives

[curl:bugs] #1462 SSL connection returns garbage data

From: Tae Hyoung Ahn <devthahn_at_users.sf.net>
Date: Sat, 06 Dec 2014 03:00:36 +0000

I attached 2 files.

One is the zip file that includes my test files and error.txt.

My environment is Windows 7 64 bit, Visual Studio 2010.
I built curl with option in below.
nmake /f Makefile.vc mode=static VC=10 DEBUG=yes MACHINE=x86 GEN_PDB=yes ENABLE_IDN=no

In the zip file, there is a python script for test web server.
The error happens rarely and it could be a python bug but I think curl library also has a bug.
I added error.txt to show the error situation.
After sspi_status is 590615, you can see the receiving garbage data.

== Info: >>schannel: sspi_status: 590615
<<<end
== Info: >>schannel: decrypted data buffer: offset 0 length 16384
<<<end
<= Recv data: >>>HTTP/1.0 200 OK
Server: Simple<<<end
write_callback: >>>HTTP/1.0 200 OK
Server: Simple<<<end
== Info: >>schannel: client wants to read 16384 bytes

The other file is the diff.
I added one log line for testing and I added a comment where I think it should be fix.

Attachment: curl_bug.diff (870 Bytes; application/octet-stream) curl_bug.zip (56.2 kB; application/x-zip-compressed)

---
** [bugs:#1462] SSL connection returns garbage data**
**Status:** open
**Labels:** SSL DarwinSSL 
**Created:** Fri Dec 05, 2014 09:45 PM UTC by Tae Hyoung Ahn
**Last Updated:** Sat Dec 06, 2014 01:34 AM UTC
**Owner:** Daniel Stenberg
When curl receives encrypted data from ssl connection, schannel_recv() tries to decrypt.
If s_pSecFn->DecryptMessage() returns a error such as SEC_I_CONTEXT_EXPIRED, schannel_recv() returns ret variable that has the encrypted packet length not decrypted packet size.
So the last line of schannel_recv() should be changed to return size variable.
 
---
Sent from sourceforge.net because curl-tracker@cool.haxx.se is subscribed to https://sourceforge.net/p/curl/bugs/
To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/curl/admin/bugs/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.
Received on 2014-12-06

These mail archives are generated by hypermail.