curl/curl
1
1
Fork 0
mirror of https://github.com/curl/curl.git synced 2025-09-19 18:42:42 +03:00
Code Issues Packages Projects Releases Wiki Activity

ngtcp2: Fix stack buffer overflow

Browse Source 
Closes #6521
This commit is contained in:
Tatsuhiro Tsujikawa 2021-01-25 18:39:00 +09:00 committed by Daniel Stenberg
parent ad1c7154b3
commit a1338d4297
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/vquic/ngtcp2.c
View File

@ -1334,13 +1334,14 @@ static ssize_t cb_h3_readfunction(nghttp3_conn *conn, int64_t stream_id,
nread = H3_SEND_SIZE - out->windex; nread = H3_SEND_SIZE - out->windex;
memcpy(&out->buf[out->windex], stream->upload_mem, nread); memcpy(&out->buf[out->windex], stream->upload_mem, nread);
out->windex += nread;
out->used += nread;
/* that's the chunk we return to nghttp3 */ /* that's the chunk we return to nghttp3 */
vec[0].base = &out->buf[out->windex]; vec[0].base = &out->buf[out->windex];
vec[0].len = nread; vec[0].len = nread;
out->windex += nread;
out->used += nread;
if(out->windex == H3_SEND_SIZE) if(out->windex == H3_SEND_SIZE)
out->windex = 0; /* wrap */ out->windex = 0; /* wrap */
stream->upload_mem += nread; stream->upload_mem += nread;