... leaving the k->str could lead to buffer over-reads later on. 64/183064/1
authorSeonah Moon <seonah1.moon@samsung.com>
Mon, 2 Jul 2018 04:54:24 +0000 (13:54 +0900)
committerSeonah Moon <seonah1.moon@samsung.com>
Mon, 2 Jul 2018 05:08:20 +0000 (14:08 +0900)
commit2b94d24a10d6e56a14c3d25349bfb0f482c781db
treeb605e6d9745f6d40e4677243924f57e723142d25
parent83885188318ce451860824456cd0a4b5a3243e28
... leaving the k->str could lead to buffer over-reads later on.

CVE: CVE-2018-1000301
Assisted-by: Max Dymond
Detected by OSS-Fuzz.
Bug: https://curl.haxx.se/docs/adv_2018-b138.html
Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7105

Change-Id: I0bd3b891aef2bf08fdb485d135e695c2eeab86a7
lib/http.c