R5Reloaded/r5sdk
1
0
Fork 0
mirror of https://github.com/Mauler125/r5sdk.git synced 2025-02-09 19:15:03 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix CVE-2021-22898

Browse Source 
Merge: curl/curl@39ce47f219
This commit is contained in:
Kawe Mazidjatari 2023-06-13 09:47:07 +02:00
parent b7cca52067
commit 44650ac245
1 changed files with 1 additions and 1 deletions

2
r5dev/thirdparty/curl/telnet.c vendored

@ -968,7 +968,7 @@ static void suboption(struct connectdata *conn)
tmplen = (strlen(v->data) + 1);
/* Add the variable only if it fits */
if(len + tmplen < (int)sizeof(temp)-6) {
if(sscanf(v->data, "%127[^,],%127s", varname, varval)) {
if(sscanf(v->data, "%127[^,],%127s", varname, varval) == 2) {
snprintf((char *)&temp[len], sizeof(temp) - len,
"%c%s%c%s", CURL_NEW_ENV_VAR, varname,
CURL_NEW_ENV_VALUE, varval);