diff options
author | Daniel Stenberg <daniel@haxx.se> | 2017-12-11 15:24:42 +0100 |
---|---|---|
committer | Daniel Stenberg <daniel@haxx.se> | 2017-12-11 15:24:42 +0100 |
commit | aa078300c2672eecf952a94ec462ae624420ca53 (patch) | |
tree | 15df63ce79e5d05351dc85953edf46572401b2fe | |
parent | ef5633d4b34a86f07d7a32f42c76a1f0eaa58c13 (diff) | |
download | curl-bagder/setopt-int_max-div1000.tar.gz |
setopt: less *or equal* than INT_MAX/1000 should be finebagder/setopt-int_max-div1000
... for the CURLOPT_TIMEOUT, CURLOPT_CONNECTTIMEOUT and
CURLOPT_SERVER_RESPONSE_TIMEOUT range checks.
Reported-by: Dominik Hölzl
Bug: https://curl.haxx.se/mail/lib-2017-12/0037.html
-rw-r--r-- | lib/setopt.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/lib/setopt.c b/lib/setopt.c index bd5fb54d9..f40b78e0b 100644 --- a/lib/setopt.c +++ b/lib/setopt.c @@ -277,7 +277,7 @@ static CURLcode setopt(struct Curl_easy *data, CURLoption option, * before it is considered failure. For pingpong protocols. */ arg = va_arg(param, long); - if((arg >= 0) && (arg < (INT_MAX/1000))) + if((arg >= 0) && (arg <= (INT_MAX/1000))) data->set.server_response_timeout = arg * 1000; else return CURLE_BAD_FUNCTION_ARGUMENT; @@ -1202,7 +1202,7 @@ static CURLcode setopt(struct Curl_easy *data, CURLoption option, * operation. */ arg = va_arg(param, long); - if((arg >= 0) && (arg < (INT_MAX/1000))) + if((arg >= 0) && (arg <= (INT_MAX/1000))) data->set.timeout = arg * 1000; else return CURLE_BAD_FUNCTION_ARGUMENT; @@ -1220,7 +1220,7 @@ static CURLcode setopt(struct Curl_easy *data, CURLoption option, * The maximum time you allow curl to use to connect. */ arg = va_arg(param, long); - if((arg >= 0) && (arg < (INT_MAX/1000))) + if((arg >= 0) && (arg <= (INT_MAX/1000))) data->set.connecttimeout = arg * 1000; else return CURLE_BAD_FUNCTION_ARGUMENT; |