delta/curl.git/src/tool_strdup.h, branch bagder/https-proxy-tests github.com: bagder/curl.git copyrights: fix copyright year range 2019-11-08T13:51:42+00:00 Daniel Stenberg daniel@haxx.se 2019-11-02T22:41:43+00:00 0bc60d91de0eda5d1c7ec8033a75980f81a33a59 .. because checksrc's copyright year check stopped working. Ref: https://github.com/curl/curl/pull/4547 Closes https://github.com/curl/curl/pull/4549 
.. because checksrc's copyright year check stopped working.

Ref: https://github.com/curl/curl/pull/4547

Closes https://github.com/curl/curl/pull/4549
URLs: change all http:// URLs to https:// 2016-02-02T23:19:02+00:00 Daniel Stenberg daniel@haxx.se 2016-02-02T23:19:02+00:00 4af40b3646d3b09f68e419f7ca866ff395d1f897 






curl_easy_duphandle: CURLOPT_COPYPOSTFIELDS read out of bounds
2014-11-05T07:05:14+00:00

Daniel Stenberg
daniel@haxx.se

2014-10-17T10:59:32+00:00

b3875606925536f82fc61f3114ac42f29eaf6945

When duplicating a handle, the data to post was duplicated using
strdup() when it could be binary and contain zeroes and it was not even
zero terminated! This caused read out of bounds crashes/segfaults.

Since the lib/strdup.c file no longer is easily shared with the curl
tool with this change, it now uses its own version instead.

Bug: http://curl.haxx.se/docs/adv_20141105.html
CVE: CVE-2014-3707
Reported-By: Symeon Paraschoudis





When duplicating a handle, the data to post was duplicated using
strdup() when it could be binary and contain zeroes and it was not even
zero terminated! This caused read out of bounds crashes/segfaults.

Since the lib/strdup.c file no longer is easily shared with the curl
tool with this change, it now uses its own version instead.

Bug: http://curl.haxx.se/docs/adv_20141105.html
CVE: CVE-2014-3707
Reported-By: Symeon Paraschoudis