diff options
| author | Daniel Gustafsson <daniel@yesql.se> | 2022-05-22 23:26:24 +0200 |
|---|---|---|
| committer | Daniel Gustafsson <daniel@yesql.se> | 2022-05-22 23:26:24 +0200 |
| commit | 5a41abef6dca19a3a89a40149f42f11e45e86a3f (patch) | |
| tree | e7a80f91bcd57eae0d066fdbba66e405baa66b4f /lib/vauth | |
| parent | 5b9770e5fc95bbaa2ebfe360c6df48ad50632e6d (diff) | |
| download | curl-5a41abef6dca19a3a89a40149f42f11e45e86a3f.tar.gz | |
ntlm: copy NTLM_HOSTNAME to host buffer
Commit 709ae2454f43 added a fake hostname to avoid leaking the local
hostname, but omitted copying it to the host buffer. Fix by copying
and adjust the test fallout.
Closes: #8895
Fixes: #8893
Reported-by: Patrick Monnerat <patrick@monnerat.net>
Reviewed-by: Daniel Stenberg <daniel@haxx.se>
Diffstat (limited to 'lib/vauth')
| -rw-r--r-- | lib/vauth/ntlm.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/vauth/ntlm.c b/lib/vauth/ntlm.c index 91c8157dd..16238ac8d 100644 --- a/lib/vauth/ntlm.c +++ b/lib/vauth/ntlm.c @@ -536,6 +536,7 @@ CURLcode Curl_auth_create_ntlm_type3_message(struct Curl_easy *data, hostlen = strlen(host); } #else + msnprintf(host, sizeof(host), "%s", NTLM_HOSTNAME); hostlen = sizeof(NTLM_HOSTNAME)-1; #endif |