22 lines
560 B
Diff
22 lines
560 B
Diff
@@ -, +, @@
|
|
(CVE-2017-13090)
|
|
---
|
|
src/retr.c | 6 ++++++
|
|
1 file changed, 6 insertions(+)
|
|
--- a/src/retr.c
|
|
+++ a/src/retr.c
|
|
@@ -378,6 +378,12 @@ fd_read_body (const char *downloaded_filename, int fd, FILE *out, wgint toread,
|
|
remaining_chunk_size = strtol (line, &endl, 16);
|
|
xfree (line);
|
|
|
|
+ if (remaining_chunk_size < 0)
|
|
+ {
|
|
+ ret = -1;
|
|
+ break;
|
|
+ }
|
|
+
|
|
if (remaining_chunk_size == 0)
|
|
{
|
|
ret = 0;
|
|
--
|