HexBrain

curl · Report #662412

Integer overflow at line 1603 in the src/operator.c file

Informativestatus
lowseverity
1upvotes
8 Feb 2021disclosed

How it was found

Summary:

[add summary of the vulnerability] On systems with a 64 bit, if —retry-max-time > 18446744073709552, config->retry-max-time*1000L will be overflow at line 1603 in the src/operator.c file. Similarly, the same is true for 32-bit operating systems.

Steps To Reproduce:

[add details for how we can reproduce the issue]

  1. [add step] run: curl --retry-max-time 18446744073709552 -v 127.0.0.1:8080/test.html
  2. [add step]
  3. [add step]

Supporting Material/References:

[list any additional material (e.g. screenshots, logs, etc.)]

  • [attachment / reference]

Impact

If the integer overflow is triggered, the parameter retry-max-time will be illegal.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original