luo980/curl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

setopt: check CURLOPT_ADDRESS_SCOPE option range

Browse Source 
... and return error instead of triggering an assert() when being way
out of range.
This commit is contained in:
Daniel Stenberg 2017-06-09 01:00:23 +02:00
parent 01596dbadf
commit 844896d064
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/url.c
View File

@ -2616,7 +2616,10 @@ CURLcode Curl_setopt(struct Curl_easy *data, CURLoption option,
* know that an unsigned int will always hold the value so we blindly * know that an unsigned int will always hold the value so we blindly
* typecast to this type * typecast to this type
*/ */
data->set.scope_id = curlx_sltoui(va_arg(param, long)); arg = va_arg(param, long);
if((arg < 0) || (arg > 0xf))
return CURLE_BAD_FUNCTION_ARGUMENT;
data->set.scope_id = curlx_sltoui(arg);
break; break;
case CURLOPT_PROTOCOLS: case CURLOPT_PROTOCOLS: