Commit a137223b authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

prevent a single byte read outside the string in test case 39

parent 52e1ce95

src/main.c

+6 −3
Original line number Diff line number Diff line
@@ -863,7 +863,6 @@ static int formparse(char *input, 
              ptr++;



            if(curlx_strnequal("type=", ptr, 5)) {



              /* set type pointer */

              type = &ptr[5];
@@ -878,10 +877,14 @@ static int formparse(char *input, 
              /* now point beyond the content-type specifier */

              sep = (char *)type + strlen(major)+strlen(minor)+1;



              if(*sep) {

                *sep=0; /* zero terminate type string */



                ptr=sep+1;

              }

              else

                ptr = NULL; /* end */

            }

            else if(curlx_strnequal("filename=", ptr, 9)) {

              filename = &ptr[9];

              ptr=strchr(filename, FORM_TYPE_SEPARATOR);