[GNUnet-SVN] [gnurl] 198/208: file: output the correct buffer to the user

[gnunet]

This is an automated email from the git hooks/post-receive script.

ng0 pushed a commit to annotated tag gnurl-7.55.0
in repository gnurl.

commit c9332fa5e84f24da300b42b1a931ade929d3e27d
Author: Even Rouault <address@hidden>
AuthorDate: Tue Aug 1 17:17:06 2017 +0200

    file: output the correct buffer to the user
    
    Regression brought by 7c312f84ea930d8 (April 2017)
    
    CVE-2017-1000099
    
    Bug: https://curl.haxx.se/docs/adv_20170809C.html
    
    Credit to OSS-Fuzz for the discovery
---
 lib/file.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/file.c b/lib/file.c
index bd426eac2..666cbe75b 100644
--- a/lib/file.c
+++ b/lib/file.c
@@ -501,7 +501,7 @@ static CURLcode file_do(struct connectdata *conn, bool 
*done)
              tm->tm_hour,
              tm->tm_min,
              tm->tm_sec);
-    result = Curl_client_write(conn, CLIENTWRITE_BOTH, buf, 0);
+    result = Curl_client_write(conn, CLIENTWRITE_BOTH, header, 0);
     if(!result)
       /* set the file size to make it available post transfer */
       Curl_pgrsSetDownloadSize(data, expected_size);

-- 
To stop receiving notification emails like this one, please contact
address@hidden