Hello Team,
I am re-sending the same email, so please ignore, if you have already
received the previous email.
Thanks and regards,
Prashant
---------- Forwarded message ----------
From: Prashant Chaudhari <[email protected]>
Date: Thu, Mar 1, 2018 at 2:05 PM
Subject: Security fix: reset memory of Curl_easy->UserDefined->str
To: [email protected]
Hello Team,
I would like to add attached patch, which zero out the user defined data. I
am particularly targeting to reset the password/authentication secrets.
Please find attached patch on the libcurl version 7.57.0. and let me know
if you can accept it and release.
Changed filed:
libcurl/7.57.0/lib/url.c
Thanks,
Prashant
283a284,286
> if (data->set.str[i]) {
> memset(data->set.str[i], 0, strlen(data->set.str[i]) * sizeof
> (data->set.str[i][0]));
> }
-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
