Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | tests: use %TESTNUMBER instead of fixed number | Daniel Stenberg | 2021-03-19 | 1 | -1/+1 |
| | | | | | | | This makes the tests easier to copy and relocate to other test numbers without having to update content. Closes #6738 | ||||
* | FTP: reject path components with control codes | Daniel Stenberg | 2018-03-12 | 1 | -0/+40 |
Refuse to operate when given path components featuring byte values lower than 32. Previously, inserting a %00 sequence early in the directory part when using the 'singlecwd' ftp method could make curl write a zero byte outside of the allocated buffer. Test case 340 verifies. CVE-2018-1000120 Reported-by: Duy Phan Thanh Bug: https://curl.haxx.se/docs/adv_2018-9cd6.html |