Commit 158d7016 authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

formboundary: convert assert into run-time check 

... to really make sure the boundary fits in the target buffer.

Fixes unused parameter 'buflen' warning.

Reported-by: Michael Kaufmann
Bug: https://github.com/curl/curl/pull/1468#issuecomment-300078754
parent 2f6bfd54

lib/formdata.c

+2 −1
Original line number Diff line number Diff line
@@ -1557,7 +1557,8 @@ static CURLcode formboundary(struct Curl_easy *data, 
{

  /* 24 dashes and 16 hexadecimal digits makes 64 bit (18446744073709551615)

     combinations */

  DEBUGASSERT(buflen >= 41);

  if(buflen < 41)

    return CURLE_BAD_FUNCTION_ARGUMENT;



  memset(buffer, '-', 24);

  Curl_rand_hex(data, (unsigned char *)&buffer[24], 17);