]> git.feebdaed.xyz Git - 0xmirror/curl.git/commit
escape: add a length check in curl_easy_escape
authorDaniel Stenberg <daniel@haxx.se>
Tue, 23 Dec 2025 23:09:37 +0000 (00:09 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Wed, 24 Dec 2025 21:47:26 +0000 (22:47 +0100)
commit76e7d496b66dfd46df3f00c4d3e7c0f92e077f2f
treecd45b9bc4e594c9230b9820de319538c7d94b08d
parent8636ad55dfbdbcc2809a61e65c3511baf5e7b0e8
escape: add a length check in curl_easy_escape

Only accept up to SIZE_MAX/16 input bytes. To avoid overflows, mistakes
and abuse.

Follow-up to 9bfc7f923479235b2fdf0e

Reported-by: Daniel Santos
Closes #20086
docs/libcurl/curl_easy_escape.md
lib/escape.c