Integer overflow at line 1603 in the src/operator.c file
Low
C
curl
Submitted None
Actions:
Reported by
cjun
Vulnerability Details
Technical details and impact analysis
## Summary:
[add summary of the vulnerability]
On systems with a 64 bit, if —retry-max-time > 18446744073709552, config->retry-max-time*1000L will be overflow at line 1603 in the src/operator.c file. Similarly, the same is true for 32-bit operating systems.
## Steps To Reproduce:
[add details for how we can reproduce the issue]
1. [add step]
run: curl --retry-max-time 18446744073709552 -v 127.0.0.1:8080/test.html
1. [add step]
1. [add step]
## Supporting Material/References:
[list any additional material (e.g. screenshots, logs, etc.)]
* [attachment / reference]
## Impact
If the integer overflow is triggered, the parameter retry-max-time will be illegal.
Report Details
Additional information and metadata
State
Closed
Substate
Informative
Submitted
Weakness
Integer Overflow