On Sat, 24 Aug 2013, Marc Roger wrote:

We are seeing that curl_easy_recv in 7.32.0 is not honouring the buflen
limitation (i.e. *n > buflen).

Environment:
a) Custom built libcurl 7.32.0 (i.e. without IDN/IPv6). Output from
curl.exe:

curl 7.32.0 (x86_64-pc-win32) libcurl/7.32.0 WinSSL

I believe the "WinSSL" part there is the key as I've not seen this using any other SSL backend. It seems this backend might indeed have this problem, see lib/curl_schannel.c:schannel_recv()

Any suggested fix?

I can't do much about it personally since this is windows specific code and I know very little about it and I can't even compile or run it.

--

 / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

Reply via email to