Change #282159
| Category | curl |
| Changed by | Joshua Rogers <MegaManSec@users.noreply.github.com> |
| Changed at | Fri 18 Sep 2026 22:53:03 |
| Repository | https://github.com/curl/curl.git |
| Project | curl |
| Branch | master |
| Revision | 7f41af8d5df18d04e95e581d55d650aac8af0654 |
Comments
formdata: reject a negative content length in curl_formadd CURLFORM_CONTENTSLENGTH and CURLFORM_CONTENTLEN accepted a negative length, which reached forminfo_copyfield() and the mime conversion as a near-SIZE_MAX size_t. Return CURL_FORMADD_INCOMPLETE instead. Closes #22996
Changed files
- lib/formdata.c