Change #282156
| Category | None |
| Changed by | Joshua Rogers <MegaManSec@users.noreply.github.com> |
| Changed at | Fri 18 Sep 2026 22:53:03 |
| Repository | https://api.github.com/repos/curl/curl |
| Project | curl/curl |
| Branch | master |
| Revision | 7f41af8d5df18d04e95e581d55d650aac8af0654 |
Comments
formdata: reject a negative content length in curl_formadd CURLFORM_CONTENTSLENGTH and CURLFORM_CONTENTLEN accepted a negative length, which reached forminfo_copyfield() and the mime conversion as a near-SIZE_MAX size_t. Return CURL_FORMADD_INCOMPLETE instead. Closes #22996
Changed files
- lib/formdata.c