| commit | e60166815448f1ce4cc27e59a16e5805e864113d | [log] [tgz] |
|---|---|---|
| author | Jay Satiro <raysatiro@yahoo.com> | Mon Mar 24 02:48:01 2025 -0400 |
| committer | Jay Satiro <raysatiro@yahoo.com> | Mon Mar 24 18:22:53 2025 -0400 |
| tree | 54018de464943d75dddf60cec5adccbacd5b703b | |
| parent | 18f04faef9d5a7f8e1a73fe33a51f7b001e34741 [diff] |
openssl: fix crash on missing cert password - Return 0 for password length if OpenSSL is expecting a certificate password but the user did not provide one. Prior to this change libcurl would crash if OpenSSL called the certificate password callback in libcurl but no password was provided (NULL). Reported-by: Roman Zharkov Fixes https://github.com/curl/curl/issues/16806 Closes https://github.com/curl/curl/pull/16807
curl is a command-line tool for transferring data specified with URL syntax. Learn how to use curl by reading the manpage or everything curl.
Find out how to install curl by reading the INSTALL document.
libcurl is the library curl is using to do its job. It is readily available to be used by your software. Read the libcurl manpage to learn how.
curl is Open Source and is distributed under an MIT-like license.
Contact us on a suitable mailing list or use GitHub issues/ pull requests/ discussions.
All contributors to the project are listed in the THANKS document.
For commercial support, maybe private and dedicated help with your problems or applications using (lib)curl visit the support page.
Visit the curl website for the latest news and downloads.
Download the latest source from the Git server:
git clone https://github.com/curl/curl.git
Report suspected security problems via our HackerOne page and not in public.
curl contains pieces of source code that is Copyright (c) 1998, 1999 Kungliga Tekniska Högskolan. This notice is included here to comply with the distribution terms.
Thank you to all our backers 🙏 Become a backer.
Support this project by becoming a sponsor.