[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[gnurl] 333/411: docs: document the 8MB input string limit
From: |
gnunet |
Subject: |
[gnurl] 333/411: docs: document the 8MB input string limit |
Date: |
Wed, 13 Jan 2021 01:22:28 +0100 |
This is an automated email from the git hooks/post-receive script.
nikita pushed a commit to branch master
in repository gnurl.
commit 8b151cb944361755396512f9cb8f53b56fa7c076
Author: Daniel Stenberg <daniel@haxx.se>
AuthorDate: Mon Nov 9 15:59:35 2020 +0100
docs: document the 8MB input string limit
for curl_easy_escape and curl_easy_setopt()
The limit is there to catch mistakes and abuse. It is meant to be large
enough to allow virtually all "fine" use cases.
Reported-by: Marc Schlatter
Fixes #6190
Closes #6191
---
docs/libcurl/curl_easy_escape.3 | 3 ++-
docs/libcurl/curl_easy_setopt.3 | 3 ++-
2 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/docs/libcurl/curl_easy_escape.3 b/docs/libcurl/curl_easy_escape.3
index 4889e8a7d..502722046 100644
--- a/docs/libcurl/curl_easy_escape.3
+++ b/docs/libcurl/curl_easy_escape.3
@@ -36,7 +36,8 @@ a-z, A-Z, 0-9, '-', '.', '_' or '~' are converted to their
"URL escaped"
version (%NN where NN is a two-digit hexadecimal number).
If \fIlength\fP is set to 0 (zero), \fIcurl_easy_escape(3)\fP uses strlen() on
-the input \fIstring\fP to find out the size.
+the input \fIstring\fP to find out the size. This function does not accept
+input strings longer than \fBCURL_MAX_INPUT_LENGTH\fP (8 MB).
You must \fIcurl_free(3)\fP the returned string when you're done with it.
.SH ENCODING
diff --git a/docs/libcurl/curl_easy_setopt.3 b/docs/libcurl/curl_easy_setopt.3
index f253dff04..e4dafa799 100644
--- a/docs/libcurl/curl_easy_setopt.3
+++ b/docs/libcurl/curl_easy_setopt.3
@@ -48,7 +48,8 @@ thus the string storage associated to the pointer argument
may be overwritten
after \fIcurl_easy_setopt(3)\fP returns. The only exception to this rule is
really \fICURLOPT_POSTFIELDS(3)\fP, but the alternative that copies the string
\fICURLOPT_COPYPOSTFIELDS(3)\fP has some usage characteristics you need to
-read up on.
+read up on. This function does not accept input strings longer than
+\fBCURL_MAX_INPUT_LENGTH\fP (8 MB).
The order in which the options are set does not matter.
--
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.
- [gnurl] 245/411: docs/FEATURE: convert to markdown, (continued)
- [gnurl] 245/411: docs/FEATURE: convert to markdown, gnunet, 2021/01/12
- [gnurl] 229/411: HISTORY: curl verifies SSL certs by default since version 7.10, gnunet, 2021/01/12
- [gnurl] 219/411: docs/opts: fix typos in two manual pages, gnunet, 2021/01/12
- [gnurl] 201/411: MANUAL: update examples to resolve without redirects, gnunet, 2021/01/12
- [gnurl] 210/411: vtls: deduplicate some DISABLE_PROXY ifdefs, gnunet, 2021/01/12
- [gnurl] 248/411: urlapi: URL encode a '+' in the query part, gnunet, 2021/01/12
- [gnurl] 257/411: CURLOPT_NOBODY.3: fix typo, gnunet, 2021/01/12
- [gnurl] 256/411: CI/azure: improve on flakiness by avoiding libtool wrappers, gnunet, 2021/01/12
- [gnurl] 221/411: runtests: add %repeat[]% for test files, gnunet, 2021/01/12
- [gnurl] 294/411: header.d: fix syntax mistake, gnunet, 2021/01/12
- [gnurl] 333/411: docs: document the 8MB input string limit,
gnunet <=
- [gnurl] 289/411: header.d: mention the "Transfer-Encoding: chunked" handling, gnunet, 2021/01/12
- [gnurl] 297/411: tool_debug_cb: do not assume zero-terminated data, gnunet, 2021/01/12
- [gnurl] 311/411: curl.se: new home, gnunet, 2021/01/12
- [gnurl] 273/411: libssh2: fix build with disabled proxy support, gnunet, 2021/01/12
- [gnurl] 253/411: openssl: acknowledge SRP disabling in configure properly, gnunet, 2021/01/12
- [gnurl] 271/411: CI/appveyor: remove (unused) runtests.pl -b option, gnunet, 2021/01/12
- [gnurl] 268/411: cmake: set the unicode feature in curl-config on Windows, gnunet, 2021/01/12
- [gnurl] 270/411: tool_help: make "output" description less confusing, gnunet, 2021/01/12
- [gnurl] 275/411: range.d: clarify that curl will not parse multipart responses, gnunet, 2021/01/12
- [gnurl] 347/411: KNOWN_BUGS: cmake uses -lpthread instead of Threads::Threads, gnunet, 2021/01/12