summaryrefslogtreecommitdiff
path: root/lib/curl_ntlm_wb.c
diff options
context:
space:
mode:
authorSteve Holme <steve_holme@hotmail.com>2014-07-12 14:56:47 +0100
committerSteve Holme <steve_holme@hotmail.com>2014-07-12 14:56:47 +0100
commitaaaf9e50ec8aec5144bcb5204b6ea80ec13384a6 (patch)
tree8f103899d5e90f46b036f8c38b5eeea817b5c449 /lib/curl_ntlm_wb.c
parent8a120710cc1906dc5145db7ab5f97e1ef23f07c0 (diff)
downloadcurl-aaaf9e50ec8aec5144bcb5204b6ea80ec13384a6.tar.gz
ntlm_wb: Fixed buffer size not being large enough for NTLMv2 sessions
Bug: http://curl.haxx.se/mail/lib-2014-07/0103.html Reported-by: David Woodhouse
Diffstat (limited to 'lib/curl_ntlm_wb.c')
-rw-r--r--lib/curl_ntlm_wb.c8
1 files changed, 5 insertions, 3 deletions
diff --git a/lib/curl_ntlm_wb.c b/lib/curl_ntlm_wb.c
index 0a221e069..57f714205 100644
--- a/lib/curl_ntlm_wb.c
+++ b/lib/curl_ntlm_wb.c
@@ -5,7 +5,7 @@
* | (__| |_| | _ <| |___
* \___|\___/|_| \_\_____|
*
- * Copyright (C) 1998 - 2012, Daniel Stenberg, <daniel@haxx.se>, et al.
+ * Copyright (C) 1998 - 2014, Daniel Stenberg, <daniel@haxx.se>, et al.
*
* This software is licensed as described in the file COPYING, which
* you should have received as part of this distribution. The terms
@@ -43,6 +43,7 @@
#include "urldata.h"
#include "sendf.h"
#include "select.h"
+#include "curl_ntlm_msgs.h"
#include "curl_ntlm_wb.h"
#include "url.h"
#include "strerror.h"
@@ -227,9 +228,10 @@ static CURLcode ntlm_wb_response(struct connectdata *conn,
const char *input, curlntlm state)
{
ssize_t size;
- char buf[200]; /* enough, type 1, 3 message length is less then 200 */
+ char buf[NTLM_BUFSIZE];
char *tmpbuf = buf;
- size_t len_in = strlen(input), len_out = sizeof(buf);
+ size_t len_in = strlen(input);
+ size_t len_out = sizeof(buf);
while(len_in > 0) {
ssize_t written = swrite(conn->ntlm_auth_hlpr_socket, input, len_in);