From 1f92831170d5be9cb0511f6f9360d3c2daf3d24c Mon Sep 17 00:00:00 2001
From: "\"Steven J. Hill\"" <sjhill@realitydiluted.com>
Date: Mon, 7 May 2007 03:58:30 +0000
Subject: Add new packages.

---
 package/curl/curl-7.13.1-2005-3185.patch | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 package/curl/curl-7.13.1-2005-3185.patch

(limited to 'package/curl/curl-7.13.1-2005-3185.patch')

diff --git a/package/curl/curl-7.13.1-2005-3185.patch b/package/curl/curl-7.13.1-2005-3185.patch
new file mode 100644
index 000000000..1df6dcee5
--- /dev/null
+++ b/package/curl/curl-7.13.1-2005-3185.patch
@@ -0,0 +1,16 @@
+--- curl-7.13.1/lib/http_ntlm.c.2005-3185	2005-02-22 13:10:30.000000000 +0100
++++ curl-7.13.1/lib/http_ntlm.c	2005-10-19 15:18:42.165859528 +0200
+@@ -534,6 +534,13 @@
+     size=64;
+     ntlmbuf[62]=ntlmbuf[63]=0;
+ 
++    /* Make sure that the user and domain strings fit in the target buffer
++         before we copy them there. */
++    if(size + userlen + domlen >= sizeof(ntlmbuf)) {
++      failf(conn->data, "user + domain name too big");
++      return CURLE_OUT_OF_MEMORY;
++    }
++
+     memcpy(&ntlmbuf[size], domain, domlen);
+     size += domlen;
+ 
-- 
cgit v1.2.3