Hello Team, I am re-sending the same email, so please ignore, if you have already received the previous email.
Thanks and regards, Prashant ---------- Forwarded message ---------- From: Prashant Chaudhari <prashan...@gmail.com> Date: Thu, Mar 1, 2018 at 2:05 PM Subject: Security fix: reset memory of Curl_easy->UserDefined->str To: curl-library@cool.haxx.se Hello Team, I would like to add attached patch, which zero out the user defined data. I am particularly targeting to reset the password/authentication secrets. Please find attached patch on the libcurl version 7.57.0. and let me know if you can accept it and release. Changed filed: libcurl/7.57.0/lib/url.c Thanks, Prashant
283a284,286 > if (data->set.str[i]) { > memset(data->set.str[i], 0, strlen(data->set.str[i]) * sizeof > (data->set.str[i][0])); > }
------------------------------------------------------------------- Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.html