package/curl/curl-7.13.1-2005-3185.patch

   1 --- curl-7.13.1/lib/http_ntlm.c.2005-3185       2005-02-22 13:10:30.000000000 +0100
   2 +++ curl-7.13.1/lib/http_ntlm.c 2005-10-19 15:18:42.165859528 +0200
   3 @@ -534,6 +534,13 @@
   4      size=64;
   5      ntlmbuf[62]=ntlmbuf[63]=0;
   6
   7 +    /* Make sure that the user and domain strings fit in the target buffer
   8 +         before we copy them there. */
   9 +    if(size + userlen + domlen >= sizeof(ntlmbuf)) {
  10 +      failf(conn->data, "user + domain name too big");
  11 +      return CURLE_OUT_OF_MEMORY;
  12 +    }
  13 +
  14      memcpy(&ntlmbuf[size], domain, domlen);
  15      size += domlen;
  16